home

dwa9res_en.dll

IBM iNotes

International Business Machines Corporation

Publisher:
IBM Corporation  (signed by International Business Machines Corporation)

Product:
IBM iNotes

Description:
IBM iNotes 9 Control

Version:
90, 1, 0, 0

MD5:
0ff66976180aa017a73fa58cf4fa6cc9

SHA-1:
4c1acfb1630f1b564a932bceaaa239b962ccc732

SHA-256:
ef2dcaddb2d5f0a021017bc001cd054cfade76e4bddd3126520b6f8f3a1f4be7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 7:20:07 AM UTC  (today)

File size:
88.2 KB (90,288 bytes)

Product version:
90, 1, 0, 0

Copyright:
c 1999 - 2013 IBM Corporation.

Original file name:
DWA8W.DLL

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\dwa9res_en.dll

Digital Signature
Signed by:
International Business Machines Corporation

Authority:
VeriSign, Inc.

Valid from:
2/22/2012 6:00:00 PM

Valid to:
5/24/2015 6:59:59 PM

Subject:
CN=International Business Machines Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=International Business Machines Corporation, L=Littleton, S=Massachusetts, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
58C5ACAD044861E3D7308782AE93E4C9

File PE Metadata
Compilation timestamp:
8/6/2013 11:55:48 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
768:CdrRZcLYtPuwnPDjO64qCENa9gaVjl98FEABT9LPEvpIB:wJ5sgkyEl98FEKpLsxK

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, B8, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
4.7845

The file dwa9res_en.dll has been seen being distributed by the following 25 URLs.

https://icuhq.icu.gov.my/dwa9res_en.dll

https://centmail.centralbank.co.in/dwa9res_en.dll

http://notes.gulfdrug.com/dwa9res_en.dll

http://mail09a.telkom.co.id/dwa9res_en.dll

http://ap-on.amorepacific.com/dwa9res_en.dll

https://mail.telkom.co.id/dwa9res_en.dll

http://mail45.telkom.co.id/dwa9res_en.dll

http://10.201.1.240/dwa9res_en.dll

http://mail02a.telkom.co.id/dwa9res_en.dll

https://rp.mahle.com/dwa9res_en.dll

https://mail.uiic.co.in/dwa9res_en.dll

http://mail.aerothai.co.th/dwa9res_en.dll

http://mail07a.telkom.co.id/dwa9res_en.dll

http://mail04a.telkom.co.id/dwa9res_en.dll

https://mail.sukhothai.com/dwa9res_en.dll

http://172.16.1.151/dwa9res_en.dll

https://webmail.tcs.com/dwa9res_en.dll

http://10.76.3.100/dwa9res_en.dll

https://www.sngpl.net/dwa9res_en.dll

http://mail01a.telkom.co.id/dwa9res_en.dll

http://mail.pta.gov.pk/dwa9res_en.dll

https://webmail.esyariah.gov.my/dwa9res_en.dll

http://mail05a.telkom.co.id/dwa9res_en.dll

http://mail06a.telkom.co.id/dwa9res_en.dll

http://mail03a.telkom.co.id/dwa9res_en.dll

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.