» adxloader64.dll
Overview
Analysis
File Details
Programs (1)

adxloader64.dll

PrintEco Inc

This is installed with PrintEco Office.

File name:

adxloader64.dll

Publisher:

PrintEco Inc (signed and verified)

Version:

8, 2, 5067, 0

MD5:

2e630a4a720c13c2c3bc7ac69c7a4151

SHA-1:

6f5af3f145f430306d2e71969d7a4290cc977420

SHA-256:

d926abe6387855f1452d703ad5900b3a6f2ecf7e2655eea3d47b1939ef8f4b7d

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 1:39:35 PM UTC (today)

File size:

724.3 KB (741,664 bytes)

Product version:

8, 2, 5067, 0

Original file name:

adxloader.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\printeco\printeco office\adxloader64.dll

Digital Signature

Signed by:

PrintEco Inc

Authority:

VeriSign, Inc.

Valid from:

2/26/2013 7:00:00 PM

Valid to:

4/28/2014 7:59:59 PM

Subject:

CN=PrintEco Inc, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=PrintEco Inc, L=Chicago, S=Illinois, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

372F06B104B5072838419DB434EFC135

Registration

CLSIDs:

{83F25646-9810-484C-B908-1D73BD6F89F1}, {BEB54677-E12F-44E7-AC7E-48241B866B5F}

ProgIDs:

PrintEcoOffice.AddinModule, PrintEcoIE.IEModule

COM registered:

Yes

File PE Metadata

Compilation timestamp:

3/18/2013 12:12:20 PM

OS version:

4.0

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:frJF9pCir6OWKIMBHeCsukqpIMB6gjME74wnOz2iGwYDl:Dr9pCir1H+Cs8pIMB6gjME74wnOz21wk

Entry address:

0x5E9D0

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 83, FA, 01, 49, 8B, F8, 8B, DA, 48, 8B, F1, 75, 05, E8, CF, DB, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 83, FE, FF, FF, CC, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 48, 8D, 59, 1C, 48, 8B, F1, BF, 01, 01, 00, 00, 48, 8B, CB, 4C, 8B, C7, 33, D2, E8, 78, C3, FF, FF, 45, 33, DB, 4C, 8D, 05, 9E, A6, 04, 00, 44, 89, 5E, 04, 44, 89, 5E, 08, 44, 89, 5E, 0C, 4C, 89... 
[+]

Entropy:

6.1200

Code size:

485.5 KB (497,152 bytes)

The file adxloader64.dll has been discovered within the following programs.

PrintEco Office by PrintEco

Some version of the PrintEco web browser extension use the OpenCandy monetization platform to bundle it with 3rd party installers.

57% remove it

Scan adxloader64.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.