home

Web.dll

179视频聊天室

SHANGHAI 51 NETWORK DEVELOPMENT CO., LTD

Publisher:
上海我要网络发展有限公司  (signed by SHANGHAI 51 NETWORK DEVELOPMENT CO., LTD)

Product:
179视频聊天室

Description:
Web DLL

Version:
1, 0, 0, 1

MD5:
44ebf6ca11558339891fb1a6aa20da5d

SHA-1:
901c3f332bb711188e7d0b1398e5af82012a2e29

SHA-256:
4724ddaf415f01836d5d5bb4eb9f29dfabb8edf4f315e397fb0fa5dbd1973e7a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 1:09:11 PM UTC  (today)

File size:
81.9 KB (83,904 bytes)

Product version:
1.0.0.1

Original file name:
Web.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\roaming\179视频聊天室\web.dll

Digital Signature
Signed by:
SHANGHAI 51 NETWORK DEVELOPMENT CO., LTD

Authority:
VeriSign, Inc.

Valid from:
4/23/2012 8:00:00 AM

Valid to:
5/24/2013 7:59:59 AM

Subject:
CN="SHANGHAI 51 NETWORK DEVELOPMENT CO., LTD", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="SHANGHAI 51 NETWORK DEVELOPMENT CO., LTD", L=上海, S=上海, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
09A81A44708F27F2B0EE31E22A33C703

File PE Metadata
Compilation timestamp:
11/3/2012 7:59:31 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1536:zYBzkWkHrxqwnM3fG8VeIvpB3WM6+eHuGQOjPUpovCp:zYBz5kHrowCfG8VeIn3f6+eHuZOjPUpp

Entry address:
0x85F3

Entry point:
83, 7C, 24, 08, 01, 75, 05, E8, 15, 04, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, CD, FE, FF, FF, 59, C2, 0C, 00, 6A, 14, 68, 68, BE, 00, 10, E8, CC, 01, 00, 00, 83, 65, FC, 00, FF, 4D, 10, 78, 3A, 8B, 4D, 08, 2B, 4D, 0C, 89, 4D, 08, FF, 55, 14, EB, ED, 8B, 45, EC, 89, 45, E4, 8B, 45, E4, 8B, 00, 89, 45, E0, 8B, 45, E0, 81, 38, 63, 73, 6D, E0, 74, 0B, C7, 45, DC, 00, 00, 00, 00, 8B, 45, DC, C3, E8, 48, 04, 00, 00, 8B, 65, E8, C7, 45, FC, FE, FF, FF, FF, E8, C2, 01, 00, 00, C2, 10, 00, 6A...
 
[+]

Entropy:
5.8224

Code size:
36 KB (36,864 bytes)

Scan Web.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.