» dBase64.DLL
Overview
Analysis
File Details

dBase64.DLL

dBase64 Module

DameWare Development

File name:

dBase64.DLL

Publisher:

DameWare Development (signed and verified)

Product:

dBase64 Module

Description:

DameWare Base64 Component

Version:

1, 4, 0, 5

MD5:

76c219d09fcde587edb432d7858e62b3

SHA-1:

c34ab132b171f5abf42b6682275f362f5ab31cf1

SHA-256:

c3f20b21442ab4af95d80e65e2fcc6b6ef8a4dc06a6d881cd5294b60fe1bbd01

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/19/2024 6:56:07 PM UTC (today)

File size:

69.7 KB (71,376 bytes)

Product version:

1, 4, 0, 5

Original file name:

dBase64.DLL

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Windows\System32\dbase64.dll

Digital Signature

Signed by:

DameWare Development

Authority:

VeriSign, Inc.

Valid from:

9/30/1999 7:00:00 AM

Valid to:

10/12/2000 6:59:59 AM

Subject:

CN=DameWare Development, L=Mandeville, S=LA, C=US, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU="www.verisign.com/repository/RPA Incorp. by Ref.,LIAB.LTD(c)98", OU=VeriSign Commercial Software Publishers CA, O="VeriSign, Inc.", L=Internet

Issuer:

OU=VeriSign Commercial Software Publishers CA, O="VeriSign, Inc.", L=Internet

Serial number:

6E35DF57A684C05537528D116A8070E2

Registration

CLSID:

{9D23597B-B861-11D2-A020-00C04F72D7D2}

ProgID:

DameWare.Base64Ctl.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

8/11/1999 12:21:50 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

768:VFo5/+pydBDu/cJeZk6ofXiNOKORBF5PiXKDZBDUlWA0NW+ynJdWtp69TFooooai:VW5/DupRYB76aLDUIoJUnSFooooaovvn

Entry address:

0x8C4B

Entry point:

FF, 74, 24, 0C, FF, 74, 24, 0C, FF, 74, 24, 0C, E8, 8E, 90, FF, FF, C2, 0C, 00, FF, 15, B8, A0, 00, 10, 33, C0, C3, A1, 40, C8, 00, 10, 56, 85, C0, 75, 13, FF, 74, 24, 08, 50, FF, 35, E0, C7, 00, 10, FF, 15, D4, A0, 00, 10, 5E, C3, 8B, 0D, 44, C8, 00, 10, 8B, 15, 3C, C8, 00, 10, FF, 05, 44, C8, 00, 10, 23, D1, 8B, 34, 90, 8B, 44, 24, 08, 83, C0, 08, 50, 6A, 00, 56, FF, 15, D4, A0, 00, 10, 85, C0, 74, 07, 89, 30, 83, C0, 08, 5E, C3, 33, C0, 5E, C3, 8B, 44, 24, 04, 33, C9, 3B, C1, 75, 0B, FF, 74, 24, 08, E8... 
[+]

Entropy:

5.7430

Code size:

36 KB (36,864 bytes)

Scan dBase64.DLL - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.