home

ProcessCS.dll

ProcessCS.dll

北京八度互联科技有限公司

Publisher:
北京八度互联科技有限公司  (signed and verified)

Product:
ProcessCS.dll

Version:
1, 0, 0, 1

MD5:
6a1726cae973c8317a3fae148f9da9fa

SHA-1:
f0b6749c2cda0d500499c5365d6a35c80575d450

SHA-256:
ee81d20d5d8595600799eea8177341f010dbdee6bb3fa395de0e225fec4398e2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 4:36:12 PM UTC  (today)

File size:
385.8 KB (395,072 bytes)

Product version:
1, 0, 0, 1

Copyright:
Copyright (C) 2008-2009 Beijing Badu Co.,Ltd

Original file name:
ProcessCS.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\qixi55\processcs.dll

Digital Signature
Signed by:
北京八度互联科技有限公司

Authority:
WoSign, Inc.

Valid from:
8/31/2010 8:00:00 AM

Valid to:
8/31/2012 7:59:59 AM

Subject:
CN=北京八度互联科技有限公司, OU=WoSign Class 3 Code Signing, O=北京八度互联科技有限公司, L=海淀区, S=北京市, C=CN

Issuer:
CN=WoSign Code Signing Authority, O="WoSign, Inc.", C=US

Serial number:
00AA8554D451C922379107CC85A7FEB976

File PE Metadata
Compilation timestamp:
12/28/2009 5:29:28 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
6144:CRG0Pmxoaw0Q83rXA8c63MnEmTbo1fzDnSXVnTqqDL6MkqvL0:CRKoa3c8c6yE4bop+9Oqn6MnvL0

Entry address:
0x22B04

Entry point:
E9, 87, E2, 01, 00, E9, 92, B7, 01, 00, E9, 9F, 30, 04, 00, E9, 28, 59, 01, 00, E9, 23, D2, 00, 00, E9, CE, E3, 03, 00, E9, 69, C4, 01, 00, E9, 5C, 30, 04, 00, E9, DF, 80, 00, 00, E9, 7A, 45, 01, 00, E9, 45, F9, 01, 00, E9, 40, D1, 01, 00, E9, FB, 48, 00, 00, E9, E6, DB, 02, 00, E9, 21, C5, 01, 00, E9, FC, 7A, 03, 00, E9, E3, 30, 04, 00, E9, 72, 2A, 01, 00, E9, 3D, B0, 01, 00, E9, 58, 2F, 01, 00, E9, E5, 2F, 04, 00, E9, AE, 06, 01, 00, E9, 89, 69, 02, 00, E9, 14, 32, 03, 00, E9, 43, 4D, 01, 00, E9, 5A, E6...
 
[+]

Entropy:
5.6739

Developed / compiled with:
Microsoft Visual C++ 8.0 (Debug)

Code size:
288 KB (294,912 bytes)

Scan ProcessCS.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.