home

shadow.dll

Midland National Life Insurance Company

Publisher:
Midland National Life Insurance Company  (signed and verified)

MD5:
5c23eddd192ff567a04409fca7888db2

SHA-1:
554afaa5929a5ba39b61e8b37629c7c420b2e966

SHA-256:
28dd9f120fb2336db0adbd07e2d6b2e5eb4e32bce576d1cde6fe68be4279a8a3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/28/2024 6:54:41 AM UTC  (today)

File size:
27.2 KB (27,896 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\midland lifesolutions\common files\shadow.dll

Digital Signature
Signed by:
Midland National Life Insurance Company

Authority:
thawte, Inc.

Valid from:
1/26/2016 4:00:00 PM

Valid to:
12/7/2016 3:59:59 PM

Subject:
CN=Midland National Life Insurance Company, O=Midland National Life Insurance Company, L=Sioux Falls, S=South Dakota, C=US

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
3B14C0F0CE79EFEA6429B40AF1527D1E

File PE Metadata
Compilation timestamp:
9/26/2016 10:19:35 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
384:kiCs5UnBJQcn/Vkzc7eLqU4YHfr7Dbr/qpMNmDBIRXUgvsnZ5jyrlUM42TyK2Tkp:WBJQ3rfbIOw8myU2

Entry address:
0x411C

Entry point:
83, 7C, 24, 08, 01, 75, 05, E8, 9C, 03, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, CD, FE, FF, FF, 59, C2, 0C, 00, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 20, 71, 00, 10, 89, 0D, 1C, 71, 00, 10, 89, 15, 18, 71, 00, 10, 89, 1D, 14, 71, 00, 10, 89, 35, 10, 71, 00, 10, 89, 3D, 0C, 71, 00, 10, 66, 8C, 15, 38, 71, 00, 10, 66, 8C, 0D, 2C, 71, 00, 10, 66, 8C, 1D, 08, 71, 00, 10, 66, 8C, 05, 04, 71, 00, 10, 66, 8C, 25, 00, 71, 00, 10, 66, 8C, 2D, FC, 70, 00, 10, 9C, 8F, 05, 30, 71, 00, 10, 8B, 45...
 
[+]

Entropy:
6.5638

Code size:
13.5 KB (13,824 bytes)

Scan shadow.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.