home

advsplash.dll

Shanda Games

Publisher:
Shanda Games  (signed and verified)

MD5:
1a4725e665b6cb3fbe202c3c3ea00e63

SHA-1:
31d9ce2260fb1f088c59030fd149990d6deded1a

SHA-256:
3ec456dc3971ca31c53e10c81263302def47cc4c08ab59dde9a2d00596262b96

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 5:46:14 PM UTC  (today)

File size:
11.8 KB (12,088 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\advsplash.dll

Digital Signature
Signed by:
Shanda Games

Authority:
VeriSign, Inc.

Valid from:
11/25/2010 4:00:00 PM

Valid to:
11/25/2013 3:59:59 PM

Subject:
CN=Shanda Games, OU=Netwrok Security, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Shanda Games, L=ShangHai, S=ShangHai, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
022893618A1DFA73D66C50FE4EE6DE61

File PE Metadata
Compilation timestamp:
4/29/2011 7:43:25 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
192:EFfb+PrONQcSC8cg6BnYe+PjPmrYOH+vyOnPr9ZCspE+TMQrJ6PpnW:E9b+PCF8cg6nYPLJOhXeMzA

Entry address:
0x129B

Entry point:
8B, 44, 24, 04, A3, 48, 30, 00, 10, 33, C0, 40, C2, 0C, 00, 8B, 0D, 4C, 30, 00, 10, 56, 8B, 35, 28, 30, 00, 10, 83, C8, FF, 83, E9, 00, 57, 8B, 3D, 40, 30, 00, 10, 74, 0B, 49, 74, 31, 49, 74, 43, E9, 97, 00, 00, 00, 8B, 15, 38, 30, 00, 10, 85, D2, 75, 5B, 8B, 0D, 2C, 30, 00, 10, 89, 0D, 38, 30, 00, 10, C7, 05, 4C, 30, 00, 10, 01, 00, 00, 00, 85, FF, 74, 05, B8, FF, 00, 00, 00, 83, 3D, 38, 30, 00, 10, 00, 75, 46, FF, 05, 4C, 30, 00, 10, 89, 35, 38, 30, 00, 10, A1, 38, 30, 00, 10, 85, C0, 75, 13, 50, 50, 68...
 
[+]

Entropy:
6.5434

Code size:
2.5 KB (2,560 bytes)

Scan advsplash.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.