1 antivirus venders flagged
this file as malicious

Signature

Signed file, invalid signature

Last scanned

4 weeks ago

4 weeks ago

dll

CRC32	0x156bb4e
MD5	e8fafbfec7c82cf83bd4358eab8a6ccc
Magic	PE32+ executable (native) x86-64, for MS Windows
SHA1	5b82cde4562f16475a2f63f87f4f85999ce1f56f
SHA256	b223c16e4cb2693eee07ba6ccff5defc541aa5e4748f03901b187bba6b6d270d
SHA512	85fe704fc3996f53ae5f633ee7e89f7cd99815668bfa55c3e7d6be6297aa253e00597ee8047010cbff0f3847bbd2e1c11da37fc274b4dd38de09490721492bc8
SSDeep	768:ZkCOeP2Yg5KY6VgQqdzfVJdf/aEB2zBdZp2e/Kg589z1hEn:nLn68BYe/Rn
Size	44.15KB
TLSH	a4134942c7551cc6eebbcb3965e89627ff30b8428730c2eb1215c1159f62be2a878356
Packer	PE+(64): compiler: Microsoft Visual C/C++(2008 SP1)[-] PE+(64): linker: Microsoft Linker(9.0)[Driver64,signed]
TrID	56.5% (.EXE) Win64 Executable (generic) (10523/12/4) 11.0% (.ICL) Windows Icons Library (generic) (2059/9) 10.9% (.EXE) OS/2 Executable (generic) (2029/13) 10.7% (.EXE) Generic Win/DOS Executable (2002/3) 10.7% (.EXE) DOS Executable Generic (2000/1)
Tags	ProcessHacker vc dll

CharacterSet	Windows, Latin1
CodeSize	21.00KB
CompanyName	wj32
EntryPoint	0x9064
ExifToolVersionNumber	12.96
FileDescription	K1234567123456
FileFlags	(none)
FileFlagsMask	0x003f
FileOs	Win32
FileSize	45 kB
FileSubtype	7
FileType	Win64 EXE
FileTypeExtension	exe
FileVersion	3.0
FileVersionNumber	3.0.0.0
ImageFileCharacteristics	Executable, Large address aware
ImageVersion	6.1
InitializedDataSize	5.50KB
LanguageCode	English (U.S.)
LegalCopyright	Licensed under the GNU GPL, v3.
LinkerVersion	9.0
MachineType	AMD AMD64
MimeType	application/octet-stream
ObjectFileType	Driver
OriginalFileName	k1234567123456.sys
OsVersion	6.1
PeType	PE32+
ProductName	K1234567123456
ProductVersion	3.0
ProductVersionNumber	3.0.0.0
Subsystem	Native
SubsystemVersion	6.1
UninitializedDataSize	0

Published	Name	Source	Country
2024-10-22 23:39:41	b223c16e4cb2693eee07ba6ccff5defc541aa5e4748f03901b187bba6b6d270d	web	N/A