» DkAr.dll
Overview
Analysis
File Details

DkAr.dll

Dekart About

Dekart

File name:

DkAr.dll

Publisher:

Dekart (signed and verified)

Product:

Dekart About

Description:

Dekart About resource.

Version:

1.04

MD5:

865d29b4ca8cf9b0663ed33d1f3952f9

SHA-1:

dd53f1b63fb59e127c323215e3caa05ad4cdcdac

SHA-256:

003e6c4c9ef1d5d9525ab5ccc394187b9bc2b86fc772fe6dd150916677c09861

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/5/2024 1:32:17 PM UTC (today)

File size:

88.2 KB (90,344 bytes)

Product version:

1.04

Original file name:

DkAr.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Windows\System32\dkar.dll

Digital Signature

Signed by:

Dekart

Authority:

Dekart

Valid from:

2/10/2006 11:50:35 AM

Valid to:

1/10/2008 11:50:35 AM

Subject:

E=info@dekart.com, CN=Dekart, O=Dekart, L=Chisinau, S=Republic of Moldova, C=MD

Issuer:

E=info@dekart.com, CN=Dekart Publisher Certificate Authority, OU=Data Security Department, O=Dekart, L=Chisinau, S=Republic of Moldova, C=MD

Serial number:

43EC7E0B

File PE Metadata

Compilation timestamp:

9/18/2006 10:16:13 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

1536:qzbsMiCjV4Bhj0IqGnybp9jpUFlgUD2Y3QTginulApW+S4oFS6OzZ6QfVLaI/CKm:qzbLiCx4hqZjwgUSYCV5Y4oFyzZTJn/W

Entry address:

0x379B0

Entry point:

80, 7C, 24, 08, 01, 0F, 85, B9, 01, 00, 00, 60, BE, 00, 40, 02, 10, 8D, BE, 00, D0, FD, FF, 57, 83, CD, FF, EB, 0D, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB... 
[+]

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 - v1.22, 0x

Code size:

80 KB (81,920 bytes)

Scan DkAr.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.