home

{blocked}.dll

PCW_NYBSEX_P5_Format

MTA SYSTEMS

Publisher:
MTA SYSTEMS

Product:
PCW_NYBSEX_P5_Format

Version:
1305.03.0001

MD5:
b9f05466c4c5b98a62e6612c72e6f1ed

SHA-1:
849bc70362b9141d58f743629d32d1b4062af8f0

SHA-256:
06b1b14d90af27259fc64d48e1750ffdfa41234ba81ad7020237c2b198c575bd

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/28/2024 7:23:46 PM UTC  (today)

Scan engine
Detection
Engine version

IKARUS anti.virus
Worm.Win32.Vobfus
t3scan.2.0.127

File size:
520 KB (532,480 bytes)

Product version:
1305.03.0001

Original file name:
PCW_NYBSEX_P5_Format.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Registration
CLSIDs:
{24330386-E857-4AA0-B028-6A3A2185235B}, {2FFC8D82-704F-444D-8C9E-110A24C561A9}, {73936DA7-905D-4ABA-9790-E124F804C5ED}, {749E2542-2BC9-438E-878F-C73433E85F8B}, {9D594574-EC6E-4061-8031-4E0D4A36609D}, {C6E95A6E-EEBC-4CB0-B8F5-D2C76C0AA621}

ProgIDs:
PCW_NYBSEX_P5_Format.CCFormInfo, PCW_NYBSEX_P5_Format.NDCInfoArray, PCW_NYBSEX_P5_Format.Format_Class, PCW_NYBSEX_P5_Format.InsInfo, PCW_NYBSEX_P5_Format.CCFormInfoArray, PCW_NYBSEX_P5_Format.InsInfoArray, PCW_NYBSEX_P5_Format.NDCInfo

COM registered:
Yes

File PE Metadata
Compilation timestamp:
5/3/2013 4:00:42 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x2EDC

Entry point:
5A, 68, B4, 5C, 07, 11, 68, B8, 5C, 07, 11, 52, E9, E7, FF, FF, FF, 00, 00, 00, 90, 00, 00, 00, 30, 00, 00, 00, 88, 00, 00, 00, 48, 00, 00, 00, 73, 84, 17, E5, 8E, F6, B3, 43, BA, 55, B4, 1C, 13, 99, 25, 2C, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 46, 6F, 72, 6D, 49, 6E, 50, 43, 57, 5F, 4E, 59, 42, 53, 45, 58, 5F, 50, 35, 5F, 46, 6F, 72, 6D, 61, 74, 00, 6C, 61, 73, 50, 43, 61, 72, 65, 57, 20, 72, 6F, 75, 74, 69, 6E, 65, 73, 20, 66, 6F, 72, 20, 50, 72, 6F, 66, 65, 73, 73, 69, 6F, 6E, 61, 6C, 20, 48, 65, 61...
 
[+]

Entropy:
6.1538

Developed / compiled with:
Microsoft Visual Basic v6.0

Code size:
452 KB (462,848 bytes)

Automation Object
CLSID:
{24330386-E857-4AA0-B028-6A3A2185235B}

CLSID name:
PCW_NYBSEX_P5_Format.CCFormInfo


Scan {blocked}.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.