» detection.dll
Overview
Analysis
File Details
Programs (1)

detection.dll

Chongqing XIA Software Technology, Inc.

File name:

detection.dll

Publisher:

Chongqing XIA Software Technology, Inc. (signed and verified)

MD5:

ab2463cd881357c1224572bb6659a5b3

SHA-1:

07fc109f0f8e7aa9f4910ae192cde6b73ac6c8ce

SHA-256:

35809141f29312fbba176a5b9be62b8d70d031f3f0e4112f88f1c86d2fd1e9fb

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 2:11:50 AM UTC (today)

File size:

80.9 KB (82,864 bytes)

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\detection.dll

Digital Signature

Signed by:

Chongqing XIA Software Technology, Inc.

Authority:

VeriSign, Inc.

Valid from:

9/10/2013 2:00:00 AM

Valid to:

9/7/2014 1:59:59 AM

Subject:

CN="Chongqing XIA Software Technology, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Chongqing XIA Software Technology, Inc.", L=ChongQing, S="Yubei District, ChongQing", C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

15460F15A5EB1B967F68E0513800E16C

File PE Metadata

Compilation timestamp:

12/16/2013 9:20:36 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

768:CuKiPyZu7g/SHiphNX0z9yThN59gsN3Igzhz6iR0dHzcjDuPTQuyV3RTtpiIEWmU:s0JoSRyTjtN46hz6hYoAtp6tU

Entry address:

0x2B1D

Entry point:

55, 8B, EC, 53, 8B, 5D, 08, 56, 8B, 75, 0C, 57, 8B, 7D, 10, 85, F6, 75, 09, 83, 3D, 10, F3, 00, 10, 00, EB, 26, 83, FE, 01, 74, 05, 83, FE, 02, 75, 22, A1, 24, 0A, 01, 10, 85, C0, 74, 09, 57, 56, 53, FF, D0, 85, C0, 74, 0C, 57, 56, 53, E8, E7, FE, FF, FF, 85, C0, 75, 04, 33, C0, EB, 4E, 57, 56, 53, E8, D3, E4, FF, FF, 83, FE, 01, 89, 45, 0C, 75, 0C, 85, C0, 75, 37, 57, 50, 53, E8, C3, FE, FF, FF, 85, F6, 74, 05, 83, FE, 03, 75, 26, 57, 56, 53, E8, B2, FE, FF, FF, 85, C0, 75, 03, 21, 45, 0C, 83, 7D, 0C, 00... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

40 KB (40,960 bytes)

The file detection.dll has been discovered within the following program.

FastRestore by XIA Software Technology, Inc.

Publisher's description - “FastRestore is a Windows based application that is able to restore protected area like OS or partition to its original configurations each time it restarts. You may roll back your configuration at each rebooting or manual rebooting.”

sysnew.com/fastrestore/support.html

56% remove it

Scan detection.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.