home

GHDiamond.Win.dll

H2-Hajisharifi

Publisher:
H2 <H.Hajisharifi> http://www.h02.ir  (signed by H2-Hajisharifi)

Description:
GHDiamond.Win

Version:
02.2011.09.0

MD5:
a57f350a4be29e829cd07ec5d705d599

SHA-1:
acce49bc0415c6b65e2c40e97ff6b3d86ad432fb

SHA-256:
cac8a7752c436e6b928e8107b4bdbebb61f0a36d4b64a80d30e943d31a2e9ab6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 12:09:39 PM UTC  (today)

File size:
365.4 KB (374,200 bytes)

Product version:
02.2011.09.0

Copyright:
© H2. All rights reserved.

Trademarks:
H2

Original file name:
GHDiamond.Win.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\Program Files\yasware\ghdiamond.win.dll

Digital Signature
Signed by:
H2-Hajisharifi

Authority:
H2-Hajisharifi

Valid from:
1/1/2000 12:00:00 AM

Valid to:
1/1/2050 12:00:00 AM

Subject:
CN=H2-Hajisharifi, OU=H2, OU=Copyright (c) 2000 H2., O=H2-Hajisharifi, E=info@h02.ir, L=Tehran, S=Tehran, C=IR, T=H2

Issuer:
CN=H2 Root Authority, OU=H2, OU=Copyright (c) 2000 H2., O=H2-Hajisharifi, E=info@h02.ir, L=Tehran, S=Tehran, C=IR, T=H2

Serial number:
ED4A5B60CCAC6DBE413CB31D20F7A03B

File PE Metadata
Compilation timestamp:
9/5/2011 4:01:22 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:hq5Ogluns3d9PLlm7UY3Aq+HKiknUQnJffoirS2v33uVziufurRK07Jp7+fJsJVM:hq5OaHBId3tSuuVziDvBJM

Entry address:
0x5B9EE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, E9, FD, 00, 00, E8, FD, 00, 00, B0, 04, 00, 00, B1, 04, 00, 00, E8, 04, 00, 00, E4, 04, 00, 00, E0, 2E, 00, 00, E1, 2E, 00, 00, 7B, 05, 4A, 0C, F4, 9C, DD, 9A, 79, DD, B7, 29, 79, 41, 09, 2B, 43, 51, 17, 2B, 4A, 3F, 40, 17, 5F, B9, E2, F4, 2D, C2, D3, 2B, 75, FE, 29, 79, 41, 34, 09, 2B, DD, 9A, 0C, 36, 44, F1, 44, 42, 52, 66, 68, 6E, 20, 4D, 18, 22, 76, B5, 33, 11, 12, 33, 0C, 6D, 0A, 20, 4D, 18, 22, 9E, A1, 29, 61, 1C, 76, B5, 05, 19...
 
[+]

Entropy:
6.1874

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
358.5 KB (367,104 bytes)

Scan GHDiamond.Win.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.