home

cards.dll

Entertainment Pack Cardplaying Helper DLL

Microsoft Corporation

Publisher:
Microsoft Corporation

Product:
Microsoft® Windows® Operating System

Description:
Entertainment Pack Cardplaying Helper DLL

Version:
5.1.2600.0 (xpclient.010817-1148)

MD5:
cbe346d789e4eddec76b582d139cbf84

SHA-1:
89f45afea256b9706a087bf3cbb78745fed33f32

SHA-256:
da311fd2daea07d7599be0d6dc52099c1436d397aa6e5086b28039c312d46903

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/14/2024 2:13:12 AM UTC  (today)

File size:
351.5 KB (359,936 bytes)

Product version:
5.1.2600.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
cards

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\freecell\cards.dll

File PE Metadata
Compilation timestamp:
9/6/2001 10:24:49 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.0

CTPH (ssdeep):
6144:n0qS0JYteStv+TDhGoFr9TXK5YxMnChF:+02htkXUYxz

Entry address:
0x1086

Entry point:
8B, 44, 24, 04, A3, FC, 20, 14, 70, 33, C0, 40, C2, 0C, 00, 55, 8B, EC, 8B, 45, 18, 3B, 05, 04, 20, 14, 70, 0F, 85, DF, 00, 00, 00, 8B, 45, 1C, 3B, 05, 00, 20, 14, 70, 0F, 85, D0, 00, 00, 00, 53, 8B, 5D, 10, 56, 8B, 35, 08, 10, 14, 70, 57, FF, 75, 14, 53, FF, 75, 08, FF, D6, 8B, 7D, 0C, FF, 75, 14, 89, 07, 8D, 43, 01, 50, FF, 75, 08, FF, D6, 89, 47, 04, 8B, 45, 14, 40, 50, 53, FF, 75, 08, FF, D6, FF, 75, 14, 89, 47, 08, 8B, 45, 18, 8D, 5C, 03, FF, 53, FF, 75, 08, FF, D6, FF, 75, 14, 89, 47, 0C, 8D, 43, FF...
 
[+]

Code size:
3 KB (3,072 bytes)

The file cards.dll has been seen being distributed by the following URL.

http://qatsi.ath.cx/diverse/.../cards.dll

Scan cards.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.