» CleanupTool.dll
Overview
Analysis
File Details

CleanupTool.dll

SD3 platform for Outlook

Avora Holdings, LTD

File name:

CleanupTool.dll

Publisher:

InvisibleCRM (signed by Avora Holdings, LTD)

Product:

SD3 platform for Outlook

Description:

Command-line/MSI tool for removing Outlook customization applied by SD3 platform.

Version:

3.27.2.172

MD5:

aeaaeacdc543a68579d7f0ee9959fdda

SHA-1:

e06cfd0604abd6ebf42d5a9466b36a8d9200b425

SHA-256:

9961ce3a1c897cbc25e2a414b97ad9dbda1d4eb6a18530ee3c52e3133ce4ddb5

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 6:07:07 PM UTC (today)

File size:

4.4 MB (4,575,288 bytes)

Product version:

3.27.2.172

Original file name:

CleanupTool.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\roaming\evernote\bin\cleanuptool.dll

Digital Signature

Signed by:

Avora Holdings, LTD

Authority:

Thawte, Inc.

Valid from:

4/25/2012 9:00:00 PM

Valid to:

5/9/2014 8:59:59 PM

Subject:

CN="Avora Holdings, LTD", O="Avora Holdings, LTD", L=Newark, S=Delaware, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

0B33439D66220ED4B8CD49186F8E81AD

File PE Metadata

Compilation timestamp:

10/14/2013 11:50:23 AM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

49152:XAhVrkTwuNYjskkWsoMud7UJVNC4L2GbVAa/w2iij4vcW2ZwpsHrITEN1R0STkgS:yh1GdCEqvHkITEN1WMtb39i

Entry address:

0x200A74

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, F7, 03, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 87, FE, FF, FF, CC, FF, 25, 70, A0, 0D, 00, FF, 25, 52, A0, 0D, 00, FF, 25, E4, 9E, 0D, 00, 48, 8B, C4, 48, 89, 58, 08, 48, 89, 68, 10, 48, 89, 70, 18, 48, 89, 78, 20, 41, 54, 48, 83, EC, 20, 4D, 8B, 51, 38, 48, 8B, F2, 4D, 8B, E0, 41, 8B, 02, 48, 8B, E9, 49, 8B, D1, 48, 03, C0, 48... 
[+]

Code size:

2.8 MB (2,982,912 bytes)

Scan CleanupTool.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.