home

bassenc.dll

Chongqing QuWan Technology Co., Ltd.

Publisher:
Un4seen Developments  (signed by Chongqing QuWan Technology Co., Ltd.)

Description:
BASSenc

Version:
2.4.10

MD5:
207eca21b8a4a1f01481be038050e22c

SHA-1:
04e504d5d64aeffc995582fb39617e5352bc0d23

SHA-256:
23fea55e031f6cb228f24032362c1509fb844677e98a775576b1234f243468a4

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
5/16/2024 8:48:02 AM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
Heur.Packed.Unknown
21179

Trend Micro House Call
Suspicious_GEN.F47V0126
7.2.194

File size:
23.5 KB (24,056 bytes)

Copyright:
Copyright © 2003-2012

File type:
Dynamic link library (Win32 DLL)

Digital Signature
Signed by:
Chongqing QuWan Technology Co., Ltd.

Authority:
WoSign CA Limited

Valid from:
2/19/2014 5:04:27 PM

Valid to:
2/19/2015 5:04:27 PM

Subject:
CN="Chongqing QuWan Technology Co., Ltd.", E=69650343@qq.com, O="Chongqing QuWan Technology Co., Ltd.", L=Chongqing, S=Chongqing, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
27E41047825795855F19CC7565E51E9E

File PE Metadata
Compilation timestamp:
11/21/2012 1:21:41 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
384:xrqeDZyhpq1vwhIToCS47jZ9zqfz1gf8oQMZgnYPLOFsXNh/b0LWYrmxJDJ:bq0o+0Ct7jZ9ur1gTZgybrBxtJ

Entry address:
0xA036

Entry point:
B8, 00, A0, 30, 10, 66, 9C, 60, 50, 8B, D8, 03, 00, 68, 94, 29, 00, 00, 6A, 00, FF, 50, 1C, 89, 43, 08, 68, 00, 00, 30, 10, 8B, 3C, 24, 8B, 33, 66, 81, C7, 80, 07, 8D, 74, 1E, 08, 89, 3B, 53, 8B, 5E, 10, B8, 80, 08, 00, 00, 56, 6A, 02, 50, 57, 6A, 14, 6A, 0A, 56, 6A, 04, 50, 57, FF, D3, 83, EE, 08, 59, F3, A5, 59, 66, 83, C7, 58, 81, C6, CC, 00, 00, 00, F3, A5, FF, D3, 58, 8D, 90, 90, 01, 00, 00, 8B, 0A, 85, C9, 0F, 84, B1, CA, FF, FF, 83, C2, 14, 8B, 5A, F0, 85, DB, 74, EC, 8B, 04, 24, 8D, 34, 01, 8B, 6C...
 
[+]

Entropy:
7.6522

Packer / compiler:
Petite v1.4

Code size:
29.7 KB (30,392 bytes)

Scan bassenc.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.