home

hook_3DA.dll

hook_3DA

ToMMTi-Systems

Publisher:
ToMMTi-Systems

Product:
hook_3DA

Version:
1.0

MD5:
6e20f79419ce2adb43b708d1c6aa8e62

SHA-1:
92e285cbc8b78d71aba782297ba97f567b61e4e1

SHA-256:
96f136674ead7b4ae971a332e0e06b4f3a7afab49f2b9a566aad3f36eb1b6a1f

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/26/2024 1:22:31 PM UTC  (today)

Scan engine
Detection
Engine version

Norman
Obfuscated_M.LF
11.20140130

File size:
88 KB (90,112 bytes)

Product version:
1.0

Original file name:
hook_3DA.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\Program Files\çáãäõæñí áèñãìíçê çáúõñ çáíïíë\3d-analyzer-v236 -ãüüüúüüüñè\hook_3da.dll

File PE Metadata
Compilation timestamp:
12/10/2004 12:44:43 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
1536:+ihSdZYnHFYZEu9nDJXloR4/UwcvCDxHE1CE:rk6WOuh8R4/UwcvCDxHE1C

Entry address:
0x427A

Entry point:
6A, 0C, 68, 00, E4, 00, 10, E8, CA, 10, 00, 00, 33, C0, 40, 89, 45, E4, 8B, 75, 0C, 33, FF, 3B, F7, 75, 0C, 39, 3D, 20, 12, 01, 10, 0F, 84, B3, 00, 00, 00, 89, 7D, FC, 3B, F0, 74, 05, 83, FE, 02, 75, 31, A1, 78, 1A, 01, 10, 3B, C7, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D0, 89, 45, E4, 39, 7D, E4, 0F, 84, 85, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 22, FE, FF, FF, 89, 45, E4, 3B, C7, 74, 72, 8B, 5D, 10, 53, 56, FF, 75, 08, E8, 15, CD, FF, FF, 89, 45, E4, 83, FE, 01, 75, 0E, 3B, C7, 75, 0A, 53, 57, FF...
 
[+]

Entropy:
5.0368

Developed / compiled with:
Microsoft Visual C++ v7.1

Code size:
48 KB (49,152 bytes)

The file hook_3DA.dll has been discovered within the following programs.

3D Analyzer  by IgroMir
About 1% of users remove it
Baidu Browser  by Baidu, Inc.
25% remove it
Baidu Spark Browser  by Baidu, Inc.
48% remove it
Maxthon Cloud Browser  by Maxthon International Limited
Publisher's description - “Maxthon Cloud Browser for Windows uses a unique, innovative dual-core design that uses both Webkit and Trident. Fast and efficient, our dual-core design displays all web pages quickly and reliably.”
www.maxthon.com
3% remove it
Mozilla Firefox 19.0 (x86 en-US)  by Mozilla
Firefox 19 features a built-in PDF viewer. Mozilla Firefox is a free and open source is a web browser coordinated by Mozilla Corporation and Mozilla Foundation that is a heavily localized.
www.mozilla.com/en-US
11% remove it
Mozilla Firefox 25.0 (x86 en-US)  by Mozilla
Firefox 25 features include, the inspector now features autocompletion for css names and values.. If away from Firefox for months, you now will be offered the option to reset it to its default state while preserving your essential information.
www.mozilla.org/en-US
5% remove it
Mozilla Firefox 31.0 (x86 en-US)  by Mozilla
Firefox has established a reputation as one of the most innovative web browsers in the market.
www.mozilla.org
9% remove it
Rocket League  by Psyonix
www.rocketleaguegame.com
About 4% of users remove it
 
Powered by Should I Remove It?

The file hook_3DA.dll has been seen being distributed by the following 3 URLs.

http://dc302.4shared.com/download/.../hook_3DA.dll?tsid=20131114-102939-b00b9cd1

http://3104991746.dl.unrestrict.me/dl/4shared.com/202/.../eNoBCAL3_XfrjUUuODMoYZSiHqgECWc2rgG68ioGHamiqgDnSyEwzCHMe2XCK1Uyib8Fe0VoLyfIkU21VC2luyXCX8Qa-R_Hdcd4rp8J-j1QQwZ-s98_pQZMdh0XW9te6YdIp_u0EG0TtWhJqyhHjtmfXoLUCm08oB0dk87_PesBtlzBS9_ebfnh2MUlVKPjn7_735u9v0g3s-thLvauvAaZzlSpLYOaZoJkogHWVn57PTZRgFy-iAkR7F6_dVrO95xaUJs0LHzKMwjCqRsniaGW04mKOzPBKo_Jvet8-vL-enBhLYZqhjdJSQOdJ5Dfv-XY9ZIQ3S_TNR1cvHQXoYPtvx1o0QWVPzv6gDjVBLx4lPAnieY5E7o12cXeG8tB9rS_sStY8paT2E-xw3dnjTtzuwmHTwd5SYM3uA8-GfXEpVLoZl04k44UOFvppZmdvHID19LyFUKiidns-eTYmMB9Rg0oFUK8X4_fpns3jSmpVfDldIQDNu1LQrRqV7sXw1_o7tHm-NPs4xQ8qSIKeRiiH6LCo0xR1_prMh27cnlZQdtAo2A6oJPSoBQ8v4dIZflu8y9VL2tAoX0hOpiSXcYMdTDCnKjSo5sfFs4iY1zcqxYoKRvwRqEF86RvL7dMPz3JYyLeWADRMF-6OQFWnj6VPH05GCE_DFQ4HbdXOGS1xyemsA8qvqa6E5SyDhQPW_mM

http://3104991746.dl.unrestrict.me/dl/4shared.com/174/.../eNoBCAL3_XfrjUUuODMoYZSiHqgECWc2rgG68ioGHamiqgDnSyEwzCHMe2XCK1Uyib8Fe0VoLyiKoIaSVimOlIowiYAIvvfzfSS_VAMgARpDmFvGrN7-gUFdwTco2uaEb-ch9e1uC3H5AKTkyVy0SwCHZWm36wMvFCh_2guJy_IpCs45Jyk__9F0sHNV04APL12V8--wQh1Um-P7apnF7GWcDhnK0oYZXZh6gh6owKUMqJiCkJEmffVfOb3E6eznukX_ZaAFGug9tZPrOvlc16lsDrUCNT8fI5gXDVk_SpjcA3Y7T-Kqo4es53z1wGDcPQMBGvqN55038iQQpjclwY4KZTApEtidXkOR1tfyX4CeSNumstVbnhQ2DzeiywcAHW7p8aHSJLfJsqJqL92eCbB72vYONhWHvKZPW31sFMzJJu3xJts17nFv5oAQWrzIC24wnCMRJty0FK_nmot6PviTs1-7rE4w0i-6ZCruUrmzFRgekjksbOK1PFtqSoajsycQfvK10rnK8gw90oTVtiGE2y3UVmj6BS2lN33TaJTSlUQ6po0K3jiIGPo5Oem5UBpr9yqPSOajCNgnMQKmhIpoooKh_HD17u2o7iq7wxGZz73j55LsL--M6tNXynSqo6yjjqQeO2wE7QpzvIY31BXGTVC5CiwWNWhQf9VpGxVVehI9ZJdLoFI0yG995flJsPyR

Scan hook_3DA.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.