home

yororx64.dll

Outlook Redemption

Versacor Offshore Software Private Limited

Publisher:
dimastr.com  (signed by Versacor Offshore Software Private Limited)

Product:
Outlook Redemption

Description:
Outlook Redemption COM library

Version:
5,0,0,2120

MD5:
ac1a8fe29c7f89a86a6ce86bb7460dcb

SHA-1:
29d0fcbaba55e9f345829d8984ffbd054d5a25bd

SHA-256:
173c904535f02e292415ea9b3d0d95d397846ee8bb1a7c4ca89947e9302bc124

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 8:47:37 PM UTC  (today)

File size:
1.3 MB (1,365,176 bytes)

Product version:
5.0

Copyright:
Copyright (c) 2000 - 2010 Dmitry Streblechenko

Original file name:
redemption.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Windows\System32\yororx64.dll

Digital Signature
Signed by:
Versacor Offshore Software Private Limited

Authority:
DigiCert Inc

Valid from:
8/19/2015 12:00:00 AM

Valid to:
8/23/2016 12:00:00 PM

Subject:
CN=Versacor Offshore Software Private Limited, O=Versacor Offshore Software Private Limited, L=Bangalore, S=Karnataka, C=IN, PostalCode=560052, STREET=18/10 3rd Flr Saleh Center, STREET=Cunningham Rd, SERIALNUMBER=U72200KA2003PTC032151, OID.1.3.6.1.4.1.311.60.2.1.3=IN, OID.2.5.4.15=Private Organization

Issuer:
CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
09AA97D948B9CE55C30C5B3AE58E4D63

Registration
CLSIDs:
{EBC7A7B5-C614-47B3-A579-27A2C2C98A13}, {FC583D50-A2F5-4656-8B1D-360488B183D3}

ProgIDs:
ProfMan.Profiles, ProfMan.PropertyBag

COM registered:
Yes

File PE Metadata
OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
2.51

CTPH (ssdeep):
24576:eGVxCtcc1MthaKY6iseKI8QyA/MO9M9ANFF/R0tWyptc+JRhSlkRLo0rBiR50Izg:3xCcFin8QyA/MO9wANbZ0tWyptc+JRhD

Entry address:
0x12E20

Entry point:
48, 81, EC, 88, 00, 00, 00, C6, 05, 02, D2, 06, 00, 01, 48, 89, 0D, EB, E0, 06, 00, 89, 15, C5, E0, 06, 00, 44, 89, 05, CE, E0, 06, 00, E8, 09, 03, 00, 00, 48, 81, C4, 88, 00, 00, 00, C3, 00, 48, 83, EC, 48, 48, 83, C4, 48, C3, 00, 00, 00, 00, 00, 00, 00, 48, 83, EC, 48, 48, 83, C4, 48, C3, 00, 00, 00, 00, 00, 00, 00, 55, 48, 89, E5, 48, 81, EC, 80, 00, 00, 00, 48, 89, 5D, E0, 48, 89, 7D, E8, 48, 89, 75, F0, 48, 89, 55, F8, 4C, 89, C6, 49, BB, 00, 00, 00, 00, 00, 00, 00, 00, 48, B8, 00, 00, 00, 00, 00, 00...
 
[+]

Code size:
405.5 KB (415,280 bytes)

Scan yororx64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.