home

ksjni32.dll

doubleTwist Corporation

The module ksjni32.dll by doubleTwist has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program doubleTwist AirPlay Recorder by doubleTwist Corporation.
Publisher:
doubleTwist Corporation  (signed and verified)

MD5:
a23de8de37578f58e2e00623eadca9b0

SHA-1:
a5613c31a85c6e5b3dd3fb322520bd706292edea

SHA-256:
d6e08a6bb3030593f29d6233393a950a33bd640e8a3f92467b23a52700cc8f6a

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/14/2024 3:04:24 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.doubleTwistCorporation (M)
16.1.7.7

File size:
306 KB (313,392 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\airplayrecorder\ksjni32.dll

Digital Signature
Signed by:
doubleTwist Corporation

Authority:
Thawte, Inc.

Valid from:
4/28/2013 7:00:00 PM

Valid to:
4/29/2014 6:59:59 PM

Subject:
CN=doubleTwist Corporation, O=doubleTwist Corporation, L=San Francisco, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
601B23F9703F2A9F8477D526ECBB853A

File PE Metadata
Compilation timestamp:
3/6/2014 5:15:33 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.23

CTPH (ssdeep):
6144:waMttYzejSwwJyDXUgGDjubu3qf8/MfJGAwq/K6786TEnCAIpi9MxipEl7BuHBTP:waMttYn3EDUqu6UM

Entry address:
0x1470

Entry point:
83, EC, 1C, 8B, 54, 24, 24, C7, 05, 30, 20, 3A, 66, 00, 00, 00, 00, 83, FA, 01, 74, 1A, 8B, 4C, 24, 28, 8B, 44, 24, 20, E8, 0D, FE, FF, FF, 83, C4, 1C, C2, 0C, 00, 8D, B4, 26, 00, 00, 00, 00, 89, 54, 24, 0C, E8, 57, C4, 00, 00, 8B, 54, 24, 0C, EB, D7, 90, 55, 89, E5, 56, 53, 83, EC, 10, 8B, 1D, 94, 41, 3A, 66, C7, 04, 24, 00, A0, 39, 66, FF, D3, 89, C6, 83, EC, 04, 85, F6, B8, F0, 1E, 39, 66, 74, 29, C7, 04, 24, 00, A0, 39, 66, FF, 15, BC, 41, 3A, 66, 83, EC, 04, A3, 1C, 20, 3A, 66, C7, 44, 24, 04, 13, A0...
 
[+]

Entropy:
5.7430

Code size:
79 KB (80,896 bytes)

The file ksjni32.dll has been discovered within the following program.

doubleTwist AirPlay Recorder  by doubleTwist Corporation
Publisher's description - “AirRecord: The AirPlay Recorder by doubleTwist records iTunes audio and radio to your phone or tablet using AirPlay! Brought to you by the creators of the popular AirSync and doubleTwist Music Player, the AirPlay Recorder saves songs and radio stations that you play from iTunes to your Android.”
www.doubletwist.com
About 2% of users remove it
 
Powered by Should I Remove It?

Remove ksjni32.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.