home

CobraAPIHook.dll

COBRA

Baum Retec AG

Publisher:
BAUM Systeme GmbH  (signed by Baum Retec AG)

Product:
COBRA

Description:
API Hooking

Version:
1.0.0.11

MD5:
9ff8251c250864615a37cf8e9d43dc01

SHA-1:
f9faf6315b4f01c5e26551ec02e8c3e2d3077cbf

SHA-256:
e80367f52cd95b6ee762f6e32491409f30a67654a53e89321c3026426905d75f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:56:30 AM UTC  (today)

File size:
121.2 KB (124,088 bytes)

Product version:
11.0.0.0

Copyright:
Copyright (C) 2013

Original file name:
CobraAPIHook.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\Program Files\baum retec\cobra\11\cobraapihook.dll

Digital Signature
Signed by:
Baum Retec AG

Authority:
Symantec Corporation

Valid from:
9/13/2015 2:00:00 AM

Valid to:
11/12/2016 12:59:59 AM

Subject:
CN=Baum Retec AG, O=Baum Retec AG, L=Wiesenbach, S=Baden Wuerttemberg, C=DE

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
2B087B7CB9AAD3EAD7080C01CA9C6B36

File PE Metadata
Compilation timestamp:
9/2/2016 4:21:34 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
1536:K7v4pcRPvv3kLVKrW3UpPeZkpUsnjTZsYZQK7sWUE/cdQ2vhTVZWP3vpOrgALyYC:KEaP+h0mZk2UXZ7WtQ2vhTVZWPfuleTL

Entry address:
0x6010

Entry point:
55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 26, 04, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, BE, FE, FF, FF, 83, C4, 0C, 5D, C2, 0C, 00, 55, 8B, EC, 83, 25, 68, 97, 01, 10, 00, 83, EC, 28, 53, 33, DB, 43, 09, 1D, 0C, 80, 01, 10, 6A, 0A, E8, 07, A0, 00, 00, 85, C0, 0F, 84, 6D, 01, 00, 00, 83, 65, F0, 00, 33, C0, 83, 0D, 0C, 80, 01, 10, 02, 33, C9, 56, 57, 89, 1D, 68, 97, 01, 10, 8D, 7D, D8, 53, 0F, A2, 8B, F3, 5B, 89, 07, 89, 77, 04, 89, 4F, 08, 89, 57, 0C, 8B, 45, D8, 8B, 4D, E4, 89, 45, F8, 81, F1, 69...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
64 KB (65,536 bytes)

Scan CobraAPIHook.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.