home

AllatPopup.DLL

AllatPopup Module

Allat Corporation

Publisher:
Allat Corp.  (signed by Allat Corporation)

Product:
AllatPopup Module

Version:
1.0.1.3

MD5:
da2796465662308c2900fa50efc2b7ce

SHA-1:
9b4a9b5d6cb73f9aee2b5bed7269ec5587b38297

SHA-256:
b9fd9f57841e8ea91cade463dc8c46f6cf4950838526911cf81916c9656c345a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/4/2024 2:11:08 PM UTC  (today)

File size:
92.6 KB (94,800 bytes)

Product version:
1.0.1.3

Copyright:
Copyright 2016

Original file name:
AllatPopup.DLL

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\windows\allatpopup.dll

Digital Signature
Signed by:
Allat Corporation

Authority:
Symantec Corporation

Valid from:
3/3/2016 9:00:00 AM

Valid to:
3/4/2019 8:59:59 AM

Subject:
CN=Allat Corporation, O=Allat Corporation, L=Gangnam-gu, S=Seoul, C=KR, SERIALNUMBER=220-81-79148, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.3=KR

Issuer:
CN=Symantec Class 3 Extended Validation Code Signing CA - G2, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
05D8EAB218462930D050FEF99A167C92

Registration
CLSID:
{D2AD68DD-55DE-41CC-B5A0-87E5B84DA21C}

ProgID:
AllatPopup.AllatPopupATL.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
11/7/2016 3:49:00 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1536:SspHNETR7fCtC58QwN9j9vn4PlO1HxArMnnPZXDNvglv6M:SeHalrCA5sN9j92O1HxTnPZXDal

Entry address:
0xB07F

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, F7, 02, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, CC, FE, FF, FF, 59, 5D, C2, 0C, 00, FF, 25, 30, D1, 00, 10, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, B0, 51, 01, 10, 89, 0D, AC, 51, 01, 10, 89, 15, A8, 51, 01, 10, 89, 1D, A4, 51, 01, 10, 89, 35, A0, 51, 01, 10, 89, 3D, 9C, 51, 01, 10, 66, 8C, 15, C8, 51, 01, 10, 66, 8C, 0D, BC, 51, 01, 10, 66, 8C, 1D, 98, 51, 01, 10, 66, 8C, 05, 94, 51, 01, 10, 66, 8C, 25, 90, 51, 01, 10, 66, 8C, 2D, 8C, 51, 01...
 
[+]

Entropy:
6.5055

Code size:
45.5 KB (46,592 bytes)

ActiveX Install
Name:
{D2AD68DD-55DE-41CC-B5A0-87E5B84DA21C}


Scan AllatPopup.DLL - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.