» SkyFexCore.dll
Overview
Analysis
File Details
Programs (1)

SkyFexCore.dll

SkyFex Remote Desktop

Tomsk Inc.

It is installed within the Mozilla Firefox web browser as part of an addin/plugin. This is installed with SkyFex Remote Desktop (remove only).

File name:

SkyFexCore.dll

Publisher:

Tomsk Inc. (signed and verified)

Product:

SkyFex Remote Desktop

Description:

SkyFex Remote Desktop (Base Engine)

Version:

3.2.0.1

MD5:

35f5043b085c8de34229235125faa44b

SHA-1:

c74d54d3a94f1c63fd1f69b2f1c9dabc9a901a1f

SHA-256:

e4de765254d33b724c57986917b7817d915097a6bf5cc0cb18fb4233afa96e10

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/6/2024 7:52:26 AM UTC (today)

File size:

4.8 MB (4,983,424 bytes)

Product version:

3.2.0.1

Original file name:

SkyFexCore.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\roaming\mozilla\firefox\profiles\{user}.default\extensions\skyfex@skyfex.com\plugins\skyfexcore.dll

Digital Signature

Signed by:

Tomsk Inc.

Authority:

Thawte, Inc.

Valid from:

3/3/2011 12:00:00 AM

Valid to:

5/28/2013 12:59:59 AM

Subject:

CN=Tomsk Inc., O=Tomsk Inc., L=Cupertino, S=California, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

5FA0FA86EF533171B3A49AC2CCE2FDC6

File PE Metadata

Compilation timestamp:

4/7/2011 10:57:18 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:CJ0Ww6hk0s7coxK4Xpx+79JYDl5aNmJBV8OlSnVNLsCxs86iNETSEsCV4ywDTx4j:CLhklYoxK+TY9+l5ImJfMHL9xsLlVZ

Entry address:

0x1E89E2

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 71, 03, 01, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 6A, 10, 68, C0, 12, 3B, 10, E8, 7B, 73, 00, 00, 33, C0, 89, 45, E0, 89, 45, FC, 89, 45, E4, 8B, 45, E4, 3B, 45, 10, 7D, 13, 8B, 75, 08, 8B, CE, FF, 55, 14, 03, 75, 0C, 89, 75, 08, FF, 45, E4, EB, E5, C7, 45, E0, 01, 00, 00, 00, C7, 45, FC, FE, FF, FF, FF, E8, 08, 00, 00, 00, E8, 82, 73, 00, 00, C2, 14, 00, 83, 7D, E0, 00, 75, 11, FF, 75, 18, FF, 75, E4, FF, 75, 0C, FF... 
[+]

Entropy:

6.7764

Code size:

3.2 MB (3,333,632 bytes)

The file SkyFexCore.dll has been discovered within the following program.

SkyFex Remote Desktop (remove only) by Tomsk Inc.

skyfex.com

About 3% of users remove it

Scan SkyFexCore.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.