home

StdUtils.dll

NSIS StdUtils plug-in

Firma Tekhniks, TOV

StdUtils.dll is the StdUtils plug-in provides access to a number of standard functions from the C Standard Library, which programmers are used to from their C/C++ compilers (and other languages), but which are not available in NSIS by default and is recompiled by Firma Tekhniks, TOV. Although a detection has been made for this resource, it is generally a commonly distributed 3rd-party library and is typically safe by itself.
Publisher:
LoRd_MuldeR  (signed by Firma Tekhniks, TOV)

Product:
NSIS StdUtils plug-in

Version:
1.0.9.0

MD5:
ead14b4fe0f4cd215b64255e44701681

SHA-1:
4d28dd7f9486b0d82926a94ed1ba0b9d25849482

SHA-256:
9e3c4a25f804b2b22cca38f9c3fd4a143d6482dd1f60b502d234ef98e1b846ea

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/16/2024 10:23:56 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
16.11.1.3

File size:
104.2 KB (106,688 bytes)

Product version:
1.0.9.0

Copyright:
Copyright (C) 2004-2015 LoRd_MuldeR <mulder2@gmx.de>

Original file name:
StdUtils.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\stdutils.dll

Digital Signature
Signed by:
Firma Tekhniks, TOV

Authority:
COMODO CA Limited

Valid from:
10/26/2016 12:00:00 AM

Valid to:
7/10/2017 11:59:59 PM

Subject:
CN="Firma Tekhniks, TOV", OU=IT, O="Firma Tekhniks, TOV", STREET="vul. Bastionna, 1/36", L=Kyyiv, S=Kyyiv, PostalCode=01014, C=UA

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
016D0AA4004750A507085D5CDF56B25B

File PE Metadata
Compilation timestamp:
11/17/2015 4:33:02 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
1536:Gyy+a3qWrX52XBcs15c4DB3OwMcFQ5WtxDv/Hp3Tdvho9ZLi1vjd47IsB6GRi6oG:Vy+yBzIRcsNJx5HbMMCO

Entry address:
0x10DF0

Entry point:
55, 8B, EC, 8B, 45, 0C, 83, F8, 01, 75, 28, 68, 50, 95, 01, 10, FF, 15, 28, 50, 01, 10, 32, C0, A2, 73, 95, 01, 10, A2, 72, 95, 01, 10, 8B, 45, 08, A3, 84, 95, 01, 10, B8, 01, 00, 00, 00, 5D, C2, 0C, 00, 85, C0, 75, 10, E8, 54, 70, FF, FF, 68, 50, 95, 01, 10, FF, 15, 20, 50, 01, 10, B8, 01, 00, 00, 00, 5D, C2, 0C, 00, 55, 8B, EC, 8B, 45, 08, 85, C0, 78, 05, 83, F8, 01, 7E, 0B, 68, 68, 53, 01, 10, FF, 15, 1C, 50, 01, 10, 33, C0, 5D, C3, CC, CC, 55, 8B, EC, 8B, 45, 0C, 8B, 4D, 14, 8B, 55, 10, A3, D0, 97, 01...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
76.5 KB (78,336 bytes)

Scan StdUtils.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.