home

disrupt_b64.dll

UBISOFT ENTERTAINMENT INC.

This is installed with Watch_Dogs. The file has been seen being downloaded from download1935.mediafire.com and multiple other hosts.
Publisher:
UBISOFT ENTERTAINMENT INC.  (signed and verified)

MD5:
8f38bdb353db613d90a5e36f8f1e140c

SHA-1:
a64b33334675c3150f7c449e7b4916315d2745ff

SHA-256:
e2f8d33aa7014c9fdd4d0ece92439bf5c144c22d42e798a9f558dce71753800c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 11:37:04 PM UTC  (a few moments ago)

File size:
41.9 MB (43,908,624 bytes)

File type:
Dynamic link library (Win64 DLL)

Digital Signature
Signed by:
UBISOFT ENTERTAINMENT INC.

Authority:
Thawte, Inc.

Valid from:
7/16/2013 8:00:00 AM

Valid to:
7/17/2014 7:59:59 AM

Subject:
CN=UBISOFT ENTERTAINMENT INC., O=UBISOFT ENTERTAINMENT INC., L=Montreal, S=Quebec, C=CA

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
2CB00860914EC0971362B8FD4C74FE0D

File PE Metadata
Compilation timestamp:
5/16/2014 2:29:16 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
786432:ajXzNvR74So42eRZK2Vw0wtxbZTiHBqQNdv//JYV9rOCwVJykcp09q12NAp:yRJ74E2eRkpdxbZGHBjN/uV9twryk20o

Entry address:
0x68C6294

Entry point:
E9, 8F, 1B, 1E, 01, 66, F7, D3, 66, 0F, CB, 66, 87, DE, 48, 89, EC, 66, F7, D7, 66, 0F, BE, F3, 66, F7, D6, 0F, 9F, C3, 5D, E9, C7, 46, 1D, 01, C2, 12, B1, CC, 76, 2D, 1B, 23, BD, 6B, 41, 27, 6F, E6, DF, C9, 05, 51, 55, 54, A9, 82, 7F, 17, 79, 5C, AB, 6A, 23, C7, 6F, F7, DD, FA, CF, 45, 19, FA, 83, D0, 33, F7, 77, F4, 93, 54, 3F, E7, B5, DD, 0E, 03, C5, 04, 6A, CB, 3B, DD, 38, 59, D2, BF, 6B, 29, 28, 9E, 6B, A3, 22, FE, FF, FF, FF, 0E, 7A, 2C, C4, 13, BC, 6A, 32, A0, C3, 14, 8A, 24, 02, F6, A5, A6, 5D, 90...
 
[+]

Entropy:
7.9279

Packer / compiler:
Xtreme-Protector v1.05

Code size:
42.8 MB (44,874,752 bytes)

The file disrupt_b64.dll has been discovered within the following programs.

Dark Souls Prepare to Die Edition  by NAMCO BANDAI Games
Publisher's description - “Dark Souls is the new action role-playing game from the developers who brought you Demon’s Souls, FromSoftware. Dark Souls will have many familiar features: A dark fantasy universe, tense dungeon crawling, fearsome enemy encounters and unique online interactions.”
www.namcobandaigames.com
10% remove it
Uplay  by Ubisoft
Uplay is a digital distribution, digital rights management, multiplayer and communications service created by Ubisoft to provide an experience similar to the achievements/trophies offered by various other game companies.
www.ubi.com
4% remove it
Watch Dogs
About 4% of users remove it
Watch Dogs EaSyCrAcK  by ScRuU, Inc.
www.gamehunt.co.za
About 3% of users remove it
Watch_Dogs  by Ubisoft
Publisher's description - “You play as Aiden Pearce, a brilliant hacker and former thug, whose criminal past led to a violent family tragedy. While seeking justice for those events, you'll monitor and hack those around you by manipulating the ctOS from the palm of your hand.”
watchdogs.ubi.com
12% remove it
 
Powered by Should I Remove It?

The file disrupt_b64.dll has been seen being distributed by the following 14 URLs.

http://download1935.mediafire.com/qpbbbbipb8sg/.../Disrupt_b64.dll

http://download2178.mediafire.com/hai156xpnrhg/.../Disrupt_b64.dll

http://download1851.mediafire.com/3lfgcs9uxxbg/.../Disrupt_b64.dll

http://download824.mediafire.com/g6gsrepth7ng/.../Disrupt_b64.dll

http://download1935.mediafire.com/z8wygy26gyhg/.../Disrupt_b64.dll

http://download1628.mediafire.com/w6ujg7n687pg/.../Disrupt_b64.dll

http://download1935.mediafire.com/c1ydi5uoc1gg/.../Disrupt_b64.dll

http://download1628.mediafire.com/n95f6d1qwa1g/.../Disrupt_b64.dll

http://download1628.mediafire.com/vbdqdja854xg/.../Disrupt_b64.dll

http://download1628.mediafire.com/6bire1x7lfzg/.../Disrupt_b64.dll

http://download998.mediafire.com/cwwu05dvuwjg/.../Disrupt_b64.dll

http://download1281.mediafire.com/vycwvaqndjug/.../Disrupt_b64.dll

http://download1281.mediafire.com/5v5jnrykttug/.../Disrupt_b64.dll

http://download1713.mediafire.com/5eb7jf2oijjg/.../Disrupt_b64.dll

Scan disrupt_b64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.