» hwaddressretriever.dll
Overview
Analysis
File Details
Programs (1)

hwaddressretriever.dll

BlueJimp

File name:

Publisher:

BlueJimp (signed and verified)

MD5:

a6af763be06cc32dae3e6143542f5f2d

SHA-1:

8b78f9d27e61ed9806cc612c24903212cdd1850b

SHA-256:

a6588efa9b37a6530b1a49e65c31ef7faeb496fb4bfb17f00e881ca6c5633688

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 1:53:59 AM UTC (today)

File size:

45.8 KB (46,864 bytes)

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Program Files\telexfree\native\hwaddressretriever.dll

Digital Signature

Signed by:

BlueJimp

Authority:

GoDaddy.com, Inc.

Valid from:

11/14/2011 5:56:31 AM

Valid to:

11/11/2013 9:19:44 PM

Subject:

CN=BlueJimp, O=BlueJimp, L=Strasbourg, S=Bas Rhin, C=FR

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

2B1057E15CFFD1

File PE Metadata

Compilation timestamp:

6/19/2012 2:07:45 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.22

CTPH (ssdeep):

768:29MCjyOXE24k5RC5XytU9LOQuhL9KyBHJSl0R5b:SMCDE24kWiQbsJSGL

Entry address:

0x1625

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 09, 27, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 33, C9, 3B, 04, CD, 10, A0, 00, 10, 74, 13, 41, 83, F9, 2D, 72, F1, 8D, 48, ED, 83, F9, 11, 77, 0E, 6A, 0D, 58, 5D, C3, 8B, 04, CD, 14, A0, 00, 10, 5D, C3, 05, 44, FF, FF, FF, 6A, 0E, 59, 3B, C8, 1B, C0, 23, C1, 83, C0, 08, 5D, C3, E8, 34, 19, 00, 00, 85, C0, 75, 06, B8, 78, A1, 00, 10, C3, 83, C0, 08, C3, 8B, FF, 55, 8B, EC, 33, C0, 39... 
[+]

Code size:

25.5 KB (26,112 bytes)

The file hwaddressretriever.dll has been discovered within the following program.

TelexFree by TelexFree

Publisher's description - “Talk to anyone, anywhere in the world for free with TelexFREE to TelexFREE calls. Calling any TelexFREE contact is free. Talk to several people at once. It's FREE as long as all users have the TelexFREE software.”

10% remove it

Scan hwaddressretriever.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.