home

ksjni64.dll

doubleTwist Corporation

The module ksjni64.dll by doubleTwist has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program doubleTwist AirPlay Recorder by doubleTwist Corporation.
Publisher:
doubleTwist Corporation  (signed and verified)

MD5:
771f4a11ba69b839075e3ad86800decd

SHA-1:
d00e2d7cf40ea4e1536122b61b12347ed6a47ab3

SHA-256:
f96d52eea9e9f9ebb0339450b68129870704603fa88c75b8707f8fd733fb893e

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/14/2024 2:51:42 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.doubleTwistCorporation (M)
16.1.7.7

File size:
281.6 KB (288,376 bytes)

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\Program Files\airplayrecorder\ksjni64.dll

Digital Signature
Signed by:
doubleTwist Corporation

Authority:
Thawte, Inc.

Valid from:
4/28/2013 7:00:00 PM

Valid to:
4/29/2014 6:59:59 PM

Subject:
CN=doubleTwist Corporation, O=doubleTwist Corporation, L=San Francisco, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
601B23F9703F2A9F8477D526ECBB853A

File PE Metadata
Compilation timestamp:
3/6/2014 5:15:33 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
2.23

CTPH (ssdeep):
6144:q0yiFUAzX38vM+1ee2k6Sk4s68dTcEgDAIpiWe97TzGux0siC6pEOEGElVt9BHUh:qmXsVDz

Entry address:
0x1400

Entry point:
48, 83, EC, 48, C7, 05, 12, AC, 02, 00, 00, 00, 00, 00, 83, FA, 01, 74, 0D, 48, 83, C4, 48, E9, 74, FE, FF, FF, 0F, 1F, 40, 00, 89, 54, 24, 30, 48, 89, 4C, 24, 38, 4C, 89, 44, 24, 28, E8, 3D, CF, 00, 00, E8, B8, D2, 00, 00, 4C, 8B, 44, 24, 28, 48, 8B, 4C, 24, 38, 8B, 54, 24, 30, 48, 83, C4, 48, E9, 41, FE, FF, FF, 90, 55, 48, 89, E5, 48, 83, EC, 30, 48, 89, 4D, 10, 48, 89, 55, 18, 48, 8B, 45, 18, 48, 89, C2, 48, 8B, 4D, 10, E8, 00, FA, 00, 00, 48, 89, 45, F8, 48, 83, 7D, F8, 00, 75, 07, B8, 00, 00, 00, 00...
 
[+]

Entropy:
4.5819

Code size:
68.5 KB (70,144 bytes)

The file ksjni64.dll has been discovered within the following program.

doubleTwist AirPlay Recorder  by doubleTwist Corporation
Publisher's description - “AirRecord: The AirPlay Recorder by doubleTwist records iTunes audio and radio to your phone or tablet using AirPlay! Brought to you by the creators of the popular AirSync and doubleTwist Music Player, the AirPlay Recorder saves songs and radio stations that you play from iTunes to your Android.”
www.doubletwist.com
About 2% of users remove it
 
Powered by Should I Remove It?

Remove ksjni64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.