home

DR5KSVC.dll

Canon Electronics DR5KSVC

Canon Electronics Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘CANON DR5010C SVC’.
Publisher:
Canon Electronics  (signed by Canon Electronics Inc.)

Product:
Canon Electronics DR5KSVC

Description:
DR5KSVC

Version:
1, 3, 2006, 1026

MD5:
55ed168d3087cbb1e828abfe02392ee8

SHA-1:
94af61641ba2289585523fae7e82e2e8e6a4b898

SHA-256:
71331ab7661972767150647be8c4dc2b52c441ade589beb887bb8de6b849e7b4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 2:58:21 PM UTC  (today)

File size:
133.5 KB (136,744 bytes)

Product version:
1, 3, 2006, 1026

Copyright:
Copyright Canon Electronics Inc. 2005-2006

Original file name:
DR5KSVC.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Windows\System32\dr5ksvc.dll

Digital Signature
Signed by:
Canon Electronics Inc.

Authority:
VeriSign, Inc.

Valid from:
11/29/2005 1:00:00 AM

Valid to:
11/30/2006 12:59:59 AM

Subject:
CN=Canon Electronics Inc., OU=IMS Design Dept. 21, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Canon Electronics Inc., L=Minato-ku, S=Tokyo, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6D24347DC33D22768154B13218D2BDF3

File PE Metadata
Compilation timestamp:
10/26/2006 6:27:03 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3072:qccaHJUSFXDpymEmt/SvotDiBq8KHNBqcKhO4UB9:qcASNcOtqv+z9

Entry address:
0x6285

Entry point:
83, 7C, 24, 08, 01, 75, 05, E8, 44, 54, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33, C2, 83, C1, 04, A9, 00, 01, 01, 81, 74, E8, 8B, 41, FC, 84, C0, 74, 32, 84, E4, 74, 24, A9, 00...
 
[+]

Code size:
72 KB (73,728 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
CANON DR5010C SVC

Command:
rundll32.exe dr5ksvc.dll,entrypointusermessage


Scan DR5KSVC.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.