home

bass.dll

Chongqing QuWan Technology Co., Ltd.

Publisher:
Un4seen Developments  (signed by Chongqing QuWan Technology Co., Ltd.)

Description:
BASS

Version:
2.4.10

MD5:
af01c2194b708e35ee392a66f251c655

SHA-1:
26b1f93c01e54e0a04dc1c1875260ce69666ee01

SHA-256:
d1d6183a9ef260f8f3256612406adff1218b3a8e96b97d677678b1f9629bb575

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
12/25/2024 7:44:11 PM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
Heur.Packed.Unknown
21179

Trend Micro House Call
Suspicious_GEN.F47V0126
7.2.194

File size:
112.5 KB (115,192 bytes)

Copyright:
Copyright © 1999-2013

File type:
Dynamic link library (Win32 DLL)

Digital Signature
Signed by:
Chongqing QuWan Technology Co., Ltd.

Authority:
WoSign CA Limited

Valid from:
2/19/2014 5:04:27 PM

Valid to:
2/19/2015 5:04:27 PM

Subject:
CN="Chongqing QuWan Technology Co., Ltd.", E=69650343@qq.com, O="Chongqing QuWan Technology Co., Ltd.", L=Chongqing, S=Chongqing, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
27E41047825795855F19CC7565E51E9E

File PE Metadata
Compilation timestamp:
2/16/2013 9:02:00 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:3yYiAB2IFLa2e/GFMx8lU5gKDkjm76wd4:3jBNN+G6TKKAqnO

Entry address:
0x4C036

Entry point:
B8, 00, C0, 04, 11, 66, 9C, 60, 50, 8B, D8, 03, 00, 68, 4C, 66, 01, 00, 6A, 00, FF, 50, 1C, 89, 43, 08, 68, 00, 00, 00, 11, 8B, 3C, 24, 8B, 33, 66, 81, C7, 80, 07, 8D, 74, 1E, 08, 89, 3B, 53, 8B, 5E, 10, B8, 80, 08, 00, 00, 56, 6A, 02, 50, 57, 6A, 11, 6A, 0A, 56, 6A, 04, 50, 57, FF, D3, 83, EE, 08, 59, F3, A5, 59, 66, 83, C7, 58, 81, C6, D0, 00, 00, 00, F3, A5, FF, D3, 58, 8D, 90, 90, 01, 00, 00, 8B, 0A, 85, C9, 0F, 84, 32, CF, FD, FF, 83, C2, 14, 8B, 5A, F0, 85, DB, 74, EC, 8B, 04, 24, 8D, 34, 01, 8B, 6C...
 
[+]

Entropy:
7.9430

Packer / compiler:
Petite v1.4

Code size:
291.7 KB (298,740 bytes)

Scan bass.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.