home

52913ac3b4e29ab142f69d7e36c2c1348eb2cc6d

ToolsLib

It is installed within the Mozilla Firefox web browser as part of an addin/plugin.
Publisher:
ToolsLib  (signed and verified)

Description:
AdwCleaner

Version:
5.1.1.9

MD5:
cac9594ad4acbeb3bb0ac4e169e89d0b

SHA-1:
75b64db9e3efbe3be19cebee5e8eec726769e1f8

SHA-256:
74cd2084cd8526962c8cb5c3deb2e2ec8ab303331df2c8962ffdc52ab69eaec7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 5:26:43 AM UTC  (today)

File size:
3.5 MB (3,680,218 bytes)

Product version:
3.3.14.2

Copyright:
Xplode

Language:
French (France)

Common path:
C:\users\{user}\appdata\local\mozilla\firefox\profiles\41a66e7e5ee1\cache2\entries\52913ac3b4e29ab142f69d7e36c2c1348eb2cc6d

Digital Signature
Signed by:
ToolsLib

Authority:
DigiCert Inc

Valid from:
4/1/2016 7:00:00 AM

Valid to:
6/2/2017 7:00:00 PM

Subject:
CN=ToolsLib, O=ToolsLib, L=BOUGUENAIS, S=Pays de la Loire, C=FR, PostalCode=44340, STREET="2T, rue des champs de bougon", SERIALNUMBER=81858912900019, OID.1.3.6.1.4.1.311.60.2.1.3=FR, OID.2.5.4.15=Private Organization

Issuer:
CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0B7F70BFEF38A6C3C34DEB33C74656ED

File PE Metadata
Compilation timestamp:
5/31/2016 2:13:57 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
49152:DshdaProUGdLbR69TWHu1IRDhD8BhmOekSbg1WmyFedQcoHj2E6V:Nozts9TaRJ2EOehg9yFeO56

Entry address:
0x401EA0

Entry point:
60, BE, 00, C0, 7A, 00, 8D, BE, 00, 50, C5, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
348 KB (356,352 bytes)

Scan 52913ac3b4e29ab142f69d7e36c2c1348eb2cc6d - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.