» ktemain64.dll
Overview
Analysis
File Details

ktemain64.dll

Addin Technology Inc.

File name:

ktemain64.dll

Publisher:

Addin Technology Inc. (signed and verified)

Version:

12.5.0.228

MD5:

a6831be8d1fe6d69fc03b4cc0b94acbe

SHA-1:

f230853270e4290ed3c0033847a24799aa2af6cc

SHA-256:

7f6b772cb53f61316883f7eba8cf02ca575ab8f555ab09acbf6d98eb5192895b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/27/2024 10:20:16 PM UTC (today)

File size:

9.4 MB (9,869,056 bytes)

Product version:

12.5.0.228

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\kutools for excel\ktemain64.dll

Digital Signature

Signed by:

Addin Technology Inc.

Authority:

Symantec Corporation

Valid from:

12/31/2015 5:00:00 AM

Valid to:

4/8/2016 4:59:59 AM

Subject:

CN=Addin Technology Inc., O=Addin Technology Inc., L=Haikou, S=Hainan, C=CN

Issuer:

CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

2597C0D81BB108E77E41E6D2A69EA4E9

File PE Metadata

Compilation timestamp:

3/21/2016 1:49:06 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

49152:76Xs4GwzkLqo65MF/niZM/mm8cdyZxSbYjrsTHUlOleZ1j1G31voeoZYg/PrRt/W:5L/Qz1GoeoSE6fGJtruc5KnVBDxAl/C

Entry address:

0x85E1CD

Entry point:

E9, 20, B3, FF, FF, E9, 72, 3E, 00, 00, 00, 00, 53, 65, 74, 4D, 65, 6E, 75, 49, 74, 65, 6D, 49, 6E, 66, 6F, 57, 00, 2C, D5, 1B, 92, 9E, 8E, CA, 3F, 0E, 15, 20, 64, 52, 83, B5, 78, C8, 43, 6D, 1F, 19, 13, BD, EF, 01, 0A, 6E, 9D, 7B, 34, 54, D8, A0, 69, D7, 55, 93, 1A, 0E, FD, 5B, 54, 04, 85, AB, E4, 2C, E0, 30, FC, D4, 57, A1, 6C, F4, CC, 74, 41, 5F, F9, B9, DC, 7D, 46, E0, 42, 44, 78, BD, 6B, 5E, 40, 97, AD, B3, 42, EC, 14, 21, 49, 87, C5, F9, AB, E3, 58, D8, 53, 3D, 50, 50, FB, 5D, 83, 1B, 35, C0, 8E, 52... 
[+]

Entropy:

6.5828

Packer / compiler:

tElock 0.99 - 1.0 private

Code size:

5.8 MB (6,106,112 bytes)

Scan ktemain64.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.