home

DkAr.dll

Dekart About

Dekart

Publisher:
Dekart  (signed and verified)

Product:
Dekart About

Description:
Dekart About resource.

Version:
1.04

MD5:
270f9ce0ad5bcfea8e646279cfabbdd4

SHA-1:
c35a88f8373f306e9ba003cf3b21a8cd429565ed

SHA-256:
0c3b73237f5fbb5b77ff767f6711c420f6c4c9cee4c5007e633c0bcd82e0039f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 1:38:44 PM UTC  (today)

File size:
165.6 KB (169,624 bytes)

Product version:
1.04

Copyright:
Copyright © Dekart

Original file name:
DkAr.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\dkar.dll

Digital Signature
Signed by:
Dekart

Authority:
Dekart

Valid from:
2/9/2005 4:30:08 AM

Valid to:
2/9/2006 4:30:08 AM

Subject:
E=info@dekart.com, CN=Dekart, O=Dekart, L=Chisinau, S="Moldova, Republic of", C=MD

Issuer:
E=info@dekart.com, CN=Dekart Publisher Certificate Authority, OU=Data Security Department, O=Dekart, L=Chisinau, S=Republic of Moldova, C=MD

Serial number:
420A0250

File PE Metadata
Compilation timestamp:
1/30/2006 12:46:20 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
1536:Ajx9J6X3wozk2qhyChgADzH5V6zx/gxX24+KpdGWR0GYRceJcAl3KJB+Ws22aCGI:A9sSZgAj2sXtzYRceJ5l3KJBpR2fH

Entry address:
0xFBA9

Entry point:
6A, 0C, 68, 98, AA, 01, 10, E8, A3, 0B, 00, 00, 33, C0, 40, 89, 45, E4, 8B, 75, 0C, 33, FF, 3B, F7, 75, 0C, 39, 3D, 6C, 01, 02, 10, 0F, 84, B3, 00, 00, 00, 89, 7D, FC, 3B, F0, 74, 05, 83, FE, 02, 75, 31, A1, 84, 19, 02, 10, 3B, C7, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D0, 89, 45, E4, 39, 7D, E4, 0F, 84, 85, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 22, FE, FF, FF, 89, 45, E4, 3B, C7, 74, 72, 8B, 5D, 10, 53, 56, FF, 75, 08, E8, C6, 84, FF, FF, 89, 45, E4, 83, FE, 01, 75, 0E, 3B, C7, 75, 0A, 53, 57, FF...
 
[+]

Entropy:
6.0728

Developed / compiled with:
Microsoft Visual C++ v7.1

Code size:
96 KB (98,304 bytes)

Scan DkAr.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.