» CustomAction.dll
Overview
Analysis
File Details

CustomAction.dll

UDM

Whitestein Technologies AG

File name:

CustomAction.dll

Publisher:

Swisscom (signed by Whitestein Technologies AG)

Product:

UDM

Description:

Custom Action dll for MSI

Version:

Swisscom UDM 12.1.0

MD5:

8627cd624fbc3da7ccb495a46230aaed

SHA-1:

b17819a68a08e65334511a0057163c7c14b811b9

SHA-256:

692904de873fe0c05cc65125a40b4679b01a4f8c71e98ae94a86ff8276b485c9

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 2:33:13 PM UTC (today)

File size:

326.3 KB (334,128 bytes)

Product version:

Swisscom UDM 12.1.0

Original file name:

CustomAction.dll

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\temp\msi2cef.tmp

Digital Signature

Signed by:

Whitestein Technologies AG

Authority:

VeriSign, Inc.

Valid from:

2/12/2013 1:00:00 AM

Valid to:

3/13/2015 12:59:59 AM

Subject:

CN=Whitestein Technologies AG, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Whitestein Technologies AG, L=Cham, S=Zug, C=CH

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4F6CA7E04D780F115AF3008322C5DCF2

File PE Metadata

Compilation timestamp:

5/3/2013 4:06:43 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

6144:7uom71h8FkFlrPFSIuD+51wQm0KXB5XC0y2:Tm7+kDcHD7PRdFT

Entry address:

0x24B4A

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, C4, AC, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 8B, 44, 24, 04, 85, C0, 74, 12, 83, E8, 08, 81, 38, DD, DD, 00, 00, 75, 07, 50, E8, 95, E7, FF, FF, 59, C3, 55, 8B, EC, 83, EC, 14, A1, E8, 92, 04, 10, 33, C5, 89, 45, FC, 53, 56, 33, DB, 39, 1D, 70, BB, 04, 10, 57, 8B, F1, 75, 38, 53, 53, 33, FF, 47, 57, 68, 54, C6, 03, 10, 68, 00, 01, 00, 00, 53, FF, 15, 80, C0, 03, 10, 85, C0, 74, 08, 89, 3D, 70, BB, 04, 10, EB, 15, FF, 15... 
[+]

Code size:

236 KB (241,664 bytes)

Scan CustomAction.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.