hemmplayer.dll

TAIWAN WELL GUARDER

Publisher:
TAIWAN WELL GUARDER  (signed and verified)

MD5:
6f199292f51ff45f536cc7dd4ce68233

SHA-1:
5e52c9b7b275183bbf44b4806f0bf6623589519d

SHA-256:
16d5cbfaf7876d6801ae7d80c17d220db4a30042ee36b71feae7bbc9788f0492

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 11:35:43 AM UTC  (today)

File size:
108.2 KB (110,840 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\hemmplayer.dll

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
7/1/2011 8:00:00 AM

Valid to:
7/12/2014 7:59:59 AM

Subject:
CN=TAIWAN WELL GUARDER, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=TAIWAN WELL GUARDER, L=Taichung, S=Taiwan, C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7A2BA6A04B75289BBA012168EF3C0A1F

File PE Metadata
Compilation timestamp:
12/18/2007 11:42:48 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3072:/N4SBWZSLvZI/uyZ9d23dk83E630d7mKPyegCwD:/eR6wubD3E630d7mKPyeJwD

Entry address:
0x13FBC

Entry point:
83, 7C, 24, 08, 01, 75, 05, E8, BC, 02, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, CD, FE, FF, FF, 59, C2, 0C, 00, 68, 24, 60, 01, 10, E8, 31, 03, 00, 00, 59, C3, 6A, 14, 68, 00, 54, 01, 10, E8, 13, 02, 00, 00, FF, 35, B4, 69, 01, 10, 8B, 35, 80, 50, 01, 10, FF, D6, 59, 89, 45, E4, 83, F8, FF, 75, 0C, FF, 75, 08, FF, 15, A4, 50, 01, 10, 59, EB, 61, 6A, 08, E8, 0B, 03, 00, 00, 59, 83, 65, FC, 00, FF, 35, B4, 69, 01, 10, FF, D6, 89, 45, E4, FF, 35, B0, 69, 01, 10, FF, D6, 89, 45, E0, 8D, 45...
 
[+]

Entropy:
6.3118

Code size:
80 KB (81,920 bytes)

Scan hemmplayer.dll - Powered by Reason Core Security