home

IEsafe.dll

IESafebar 安全工具条

Beijing Gigabit Times Technology Co., Ltd

The library IEsafe.dll has been detected as malware by 5 anti-virus scanners.
Publisher:
北京千兆时代科技有限公司  (signed by Beijing Gigabit Times Technology Co., Ltd)

Product:
IESafebar 安全工具条

Version:
2.1.722.1

MD5:
791e98f2dbe2082f9ab7ed2cf8fd20ed

SHA-1:
ce75b11ed7a7cbc1083fa780382113e2056e3431

SHA-256:
37afbbc50b8f3e1a2142fbd72135e51a984a1d4f96e7179284997383c09ffd9f

Scanner detections:
5 / 68

Status:
Malware

Analysis date:
4/25/2024 4:10:47 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/BHO.adph
7.11.11.172

IKARUS anti.virus
Virus.Downloader.Rozena
t3scan.1.1.104.0

McAfee
Artemis!791E98F2DBE2
5600.6892

Norman
W32/Smalltroj.ZIWE
11.20150108

Panda Antivirus
Suspicious file
15.01.08.12

File size:
1 MB (1,060,208 bytes)

Product version:
2.1.722.1

Copyright:
北京千兆时代科技有限公司

Original file name:
IEsafe.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\common files\angels\iesafe.dll

Digital Signature
Signed by:
Beijing Gigabit Times Technology Co., Ltd

Authority:
VeriSign, Inc.

Valid from:
12/24/2008 8:00:00 AM

Valid to:
12/25/2011 7:59:59 AM

Subject:
CN="Beijing Gigabit Times Technology Co., Ltd", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Beijing Gigabit Times Technology Co., Ltd", L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
77A64759F12766E363D779998C71BDC9

File PE Metadata
Compilation timestamp:
7/27/2010 12:56:16 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:3j9JDoz0V/FqOec6b1YuU73SwJiSj1zejBLHc2ELKBlrF9m55AcXrBti5+tLJGIH:z+j9m52gti5+lj+P+W9JLU

Entry address:
0x5FA83

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 08, B6, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 83, EC, 18, 53, FF, 75, 0C, 8D, 4D, E8, E8, D5, C9, FF, FF, 8B, 5D, 08, 81, FB, 00, 01, 00, 00, 73, 54, 8B, 4D, E8, 83, B9, AC, 00, 00, 00, 01, 7E, 14, 8D, 45, E8, 50, 6A, 02, 53, E8, DC, 03, 00, 00, 8B, 4D, E8, 83, C4, 0C, EB, 0D, 8B, 81, C8, 00, 00, 00, 0F, B7, 04, 58, 83, E0, 02, 85, C0, 74, 0F, 8B, 81, D0, 00, 00, 00, 0F, B6, 04, 18, E9, A7, 00...
 
[+]

Entropy:
6.3623

Code size:
504.5 KB (516,608 bytes)

Remove IEsafe.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.