» startisback64.dll
Overview
Analysis
File Details
Programs (1)

startisback64.dll

StartIsBack

Stanislav Zinukhov

File name:

startisback64.dll

Publisher:

www.startisback.com (signed by Stanislav Zinukhov)

Product:

StartIsBack

Description:

StartIsBack++ brains and soul

Version:

4.0.0

MD5:

04cfe14c41bc24f1779868765eaace5d

SHA-1:

c70e940aaee66a359483bef94970ad962445200f

SHA-256:

0c82edd7d988cd01cee7b04b919c18e85891f0bc9a00296c0b7ed07f0553b28c

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/23/2024 8:19:37 PM UTC (today)

File size:

380.1 KB (389,192 bytes)

Product version:

4.0.0

Original file name:

STARTISBACK.NEXT.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\startisback\startisback64.dll

Digital Signature

Signed by:

Stanislav Zinukhov

Authority:

StartCom Ltd.

Valid from:

10/23/2014 5:42:50 PM

Valid to:

10/23/2016 4:55:24 AM

Subject:

E=tihiy.mozg@gmail.com, CN=Stanislav Zinukhov, L=Moscow, S=Moscow City, C=RU, Description=2rsUwMPWJuFdSNsA

Issuer:

CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:

109C

Registration

CLSIDs:

{865e5e76-ad83-4dca-a109-50dc2113ce9b}, {a2a9545d-a0c2-42b4-9708-a0b2badd77c9}, {AD1405D2-30CF-4877-8468-1EE1C52C759F}, {c71c41f1-ddad-42dc-a8fc-f5bfc61df958}, {E5C31EC8-C5E6-4E07-957E-944DB4AAD85E}

COM registered:

Yes

File PE Metadata

Compilation timestamp:

7/30/2015 1:33:22 AM

OS version:

6.0

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

12.0

CTPH (ssdeep):

6144:6Bpe/FlzcrTaddhIj3qU8z0sSvBpJA3/RSGd8Fro+3MRcKpbCm:6Bs/nzIYhIjZsgfpAYCd

Entry address:

0x1498

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, E3, 00, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, D3, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 48, 8B, C1, B9, 4D, 5A, 00, 00, 66, 39, 08, 74, 03, 33, C0, C3, 48, 63, 48, 3C, 48, 03, C8, 33, C0, 81, 39, 50, 45, 00, 00, 75, 0C, BA, 0B, 02, 00, 00, 66, 39, 51, 18, 0F, 94, C0, F3, C3, CC, 4C, 63, 41, 3C, 45, 33, C9, 4C... 
[+]

Entropy:

5.9608

Code size:

182.5 KB (186,880 bytes)

The file startisback64.dll has been discovered within the following program.

StartIsBack++ by startisback.com

About 1% of users remove it

Scan startisback64.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.