home

CheckAuthorization.dll

CheckAuthorization 动态链接库

Hangzhou Chuangju Technology Co.,LTD

Publisher:
安全狗互联网安全实验室  (signed by Hangzhou Chuangju Technology Co.,LTD)

Product:
CheckAuthorization 动态链接库

Description:
CheckAuthorization

Version:
1, 0, 0, 5

MD5:
8a658295ebf861b287f6fa0927a9e3c9

SHA-1:
e58361ad2228f5f709213d6a19ba817cbdf79799

SHA-256:
306b5cfae4a650adb5c004c62d8209daba1e6cb39a02f74a50c231795d8783b6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 12:31:27 AM UTC  (today)

File size:
341.1 KB (349,320 bytes)

Product version:
1, 0, 0, 5

Copyright:
安全狗互联网安全实验室，保留所有权利。

Original file name:
CheckAuthorization.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\safedogclientupdatecenter\checkauthorization.dll

Digital Signature
Signed by:
Hangzhou Chuangju Technology Co.,LTD

Authority:
WoSign eCommerce Services Limited

Valid from:
7/18/2011 4:27:34 AM

Valid to:
7/19/2014 9:43:00 AM

Subject:
E=web@safedog.cn, CN="Hangzhou Chuangju Technology Co.,LTD", O="Hangzhou Chuangju Technology Co.,LTD", L=Hangzhou, S=Zhejiang, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign eCommerce Services Limited, C=CN

Serial number:
7D81565064D7

File PE Metadata
Compilation timestamp:
10/26/2012 5:40:18 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:dIDJZyBRsaSxXk2H0YvDR7Jmd1MCP1PooScvo0iF+3SZ5TKFjwwl04:mtZyBRwku00xJmd1MSxScg0i43SZAFcm

Entry address:
0x962D3

Entry point:
9C, 66, 89, 3C, 24, C7, 04, 24, F7, 26, 2D, C0, E8, 7B, DD, 00, 00, FF, 34, 24, 88, 54, 24, 08, 8D, 64, 24, 0C, 0F, 83, 9C, 0B, 00, 00, 66, D3, F9, 66, 87, FB, 89, C3, 9C, D3, D9, 89, C7, 0F, 97, C5, E8, D2, 28, 00, 00, F5, E8, 99, 01, FE, FF, C6, D3, B4, 11, DE, 85, 3A, 6E, A0, 1E, 43, 25, 05, 69, C9, 2C, 89, 6C, 4A, AC, 0A, 68, CC, 9D, EE, 55, A6, AA, D4, AE, 11, 4B, 26, 4B, 9C, 95, 64, 8F, FC, CD, F8, 65, 7A, F9, F8, D5, B7, BC, 2B, 20, 58, 1D, E5, 02, 7A, EA, 7D, 52, CC, 30, 3F, 03, 19, 3E, B0, 6B, 7C...
 
[+]

Entropy:
7.8569  (probably packed)

Code size:
220 KB (225,280 bytes)

Scan CheckAuthorization.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.