» CAPICOM.DLL
Overview
Analysis
File Details
Behaviors (14)
Downloads (25)

CAPICOM.DLL

CAPICOM Module

Microsoft Corporation

File name:

CAPICOM.DLL

Publisher:

Microsoft Corporation (signed and verified)

Product:

CAPICOM Module

Version:

2, 1, 0, 2

MD5:

9130cce19b5db3d2e31f9f789263fc4a

SHA-1:

14485ae3e9d259180be76f3cb69493d0f29ea829

SHA-256:

61450bd6bc6590236b1df56e1594b12ae174496357a49b5963c41d0d1465d66f

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

11/15/2024 12:43:11 PM UTC (today)

File size:

499.3 KB (511,328 bytes)

Product version:

2, 1, 0, 2

Original file name:

CAPICOM.DLL

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\common files\microsoft shared\capicom\capicom.dll

Digital Signature

Signed by:

Microsoft Corporation

Authority:

Microsoft Corporation

Valid from:

4/4/2006 3:43:46 PM

Valid to:

10/4/2007 3:53:46 PM

Subject:

CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:

Serial number:

61469ECB000400000065

File PE Metadata

Compilation timestamp:

4/9/2007 5:56:02 PM

OS version:

6.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

6144:59+ABr0k51P1lC+okLlvcRIoR955UXgZe/gCJRXOun0sd:59n0QQ+faT955RUgWLjd

Entry address:

0x316C5

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, C6, 32, 00, 00, 5D, E9, A3, FD, FF, FF, CC, CC, CC, CC, CC, 3B, 0D, 54, 36, 45, 00, 75, 02, F3, C3, E9, 36, 33, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 69, 33, C0, 8A, 44, 24, 08, 84, C0, 75, 16, 81, FA, 00, 01, 00, 00, 72, 0E, 83, 3D, BC, 64, 45, 00, 00, 74, 05, E9, 3C, 34, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01... 
[+]

Code size:

287.5 KB (294,400 bytes)

2 ActiveX Installs

Name:

{A669A792-C9CF-4A85-896A-8CAE384598FF}

Name:

{093754E3-943C-4FEB-8C19-2ED5D02CBE15}

18 Safe for Initializing Controls

CLSID:

{22A85CE1-F011-4231-B9E4-7E7A0438F71B}

CLSID name:

Utilities Class

CLSID:

{3605B612-C3CF-4ab4-A426-2D853391DB2E}

CLSID name:

Certificates Class

CLSID:

{54BA1E8F-818D-407F-949D-BAE1692C5C18}

CLSID name:

Attribute Class

CLSID:

{550C8FFB-4DC0-4756-828C-862E6D0AE74F}

CLSID name:

Chain Class

CLSID:

{60A9863A-11FD-4080-850E-A8E184FC3A3C}

CLSID name:

Signer Class

CLSID:

{7BF3AC5C-CC84-429A-ACA5-74D916AD6B8C}

CLSID name:

OID Class

18 Safe for Scripting Controls

Name:

{22A85CE1-F011-4231-B9E4-7E7A0438F71B}

Name:

{3605B612-C3CF-4ab4-A426-2D853391DB2E}

Name:

{54BA1E8F-818D-407F-949D-BAE1692C5C18}

Name:

{550C8FFB-4DC0-4756-828C-862E6D0AE74F}

Name:

{60A9863A-11FD-4080-850E-A8E184FC3A3C}

Name:

{7BF3AC5C-CC84-429A-ACA5-74D916AD6B8C}

The file CAPICOM.DLL has been seen being distributed by the following 25 URLs.

http://pt.fix4dll.com/.../?file=capicom.dll&md5=1B6E2050ABBDA860F4F9F245D1E150A5

ftp://ftp.infotask.com.br/DLLs/.../capicom.dll

http://localhost:18080/.../capicom.dll

http://qualitycenter.tsl.telus.com/.../capicom.dll

https://www.copitec.org.ar/capicom.dll

http://qcind:8080/.../capicom.dll

ftp://ftp.enfock.com.br/Utilitarios ENFOCK/.../capicom.dll

https://dl-web.dropbox.com/get/.../capicom.dll?w=AACxDHosOuMwI9FtPrnKAD1ZxaO2F8m6fcoFu0XGK8Mi5g&dl=1&_subject_uid=357905123

https://www.circe.es/.../capicom.dll

http://priv.rezendesistemas.com.br/.../capicom.dll

https://www.confirma.com.ar/.../capicom.dll

ftp://ftp.frgnet.com.br/InstalaÃ§Ã£o NFCe/01 Instalar Capicom/.../capicom.dll

http://tdsrvca02:8080/.../capicom.dll

https://mail.google.com/mail/u/.../?ui=2&ik=c77214292c&view=att&th=158bf2bcfd49c303&attid=0.1&disp=safe&realattid=f_iw7ocaqb0&zw

http://155.17.170.50:8080/.../capicom.dll

http://newproxy.expnordeste.com.br/.../capicom.dll

http://acfd.encodesa.com.ar/capicom.dll

http://qcenter/.../capicom.dll

https://aixbs.b-trust.org/wl-dl/bs/client_test2/js/.../capicom.dll

https://www.dropbox.com/pri/get/public/atualizacao 05_05_2016 hora 10_30/.../capicom.dll?_subject_uid=69256957&w=AADjpDs0MQkxXWp5MdfRXNiqt1mEOIw3aIRyjYB14RP6pw&dl=1

http://assist.cmbc.com.cn/capicom.dll

ftp://ftp.enfock.com.br/Utilitarios ENFOCK/Certificados e DLLs/.../capicom.dll

http://qcweb:8080/.../capicom.dll

https://acfd.encodesa.com.ar/capicom.dll

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.