» cmaidctl_vsp.closetmaid.com_downloader.dll
Overview
Analysis
File Details
Behaviors (1)

cmaidctl_vsp.closetmaid.com_downloader.dll

Closetmaid Corporation

File name:

Publisher:

Closetmaid Corporation (signed and verified)

MD5:

75687aaea5f341b096a2a4898b4c1a84

SHA-1:

9b0e2e9724c49b0f288c95a25cab94319acf665d

SHA-256:

bd066a2572b1ff64329072bc253ef63c04caf07b3f4d1b69bf6686d7a5713610

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/23/2024 5:33:20 PM UTC (today)

File size:

16.6 KB (17,032 bytes)

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\windows\downloaded Program Files\conflict.1\cmaidctl_vsp.closetmaid.com_downloader.dll

Digital Signature

Signed by:

Closetmaid Corporation

Authority:

Thawte, Inc.

Valid from:

10/27/2011 7:00:00 PM

Valid to:

11/7/2012 5:59:59 PM

Subject:

CN=Closetmaid Corporation, O=Closetmaid Corporation, L=Ocala, S=Florida, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

2BAFE018E50B4920ABAEECC58A6CB580

File PE Metadata

Compilation timestamp:

12/12/2007 5:55:51 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

192:OTOTtrIxqjaH7Mmrzc/LJRkWRY/ZWSQiUvqY8EAyowJL/DX8Hou7+w+v4:nuH7Miz+5Y/Z7FYJLDNuMA

Entry address:

0x2557

Entry point:

8B, 44, 24, 04, 56, 8B, 35, 80, 20, 00, 20, 68, C4, 21, 00, 20, A3, 10, 10, 00, 20, FF, D6, 68, AC, 21, 00, 20, A3, 04, 10, 00, 20, FF, D6, A3, 00, 10, 00, 20, 33, C0, 40, 5E, C2, 0C, 00, 8B, 4C, 24, 0C, 85, C9, 74, 23, 8A, 44, 24, 08, 0F, B6, C0, 69, C0, 01, 01, 01, 01, 8B, D1, 53, 57, 8B, 7C, 24, 0C, C1, E9, 02, F3, AB, 8B, CA, 83, E1, 03, F3, AA, 5F, 5B, 8B, 44, 24, 04, C3, 55, 8B, EC, 51, 51, 53, 56, 8B, 75, 08, 57, 33, C0, 66, 89, 45, F8, 8D, 7D, FA, AB, 66, AB, 33, FF, 33, C9, 47, 8A, 16, 80, FA, 20... 
[+]

Entropy:

6.5771

Code size:

8.5 KB (8,704 bytes)

ActiveX Install

Name:

{7FE26BE2-B923-4B41-9834-E84DA1CC1F96}

Scan cmaidctl_vsp.closetmaid.com_downloader.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.