» indievolume.hook.dll
Overview
Analysis
File Details

indievolume.hook.dll

Andriy Gerasika

File name:

Publisher:

Andriy Gerasika (signed and verified)

MD5:

f2749c62dc4e1d796fca4af683258587

SHA-1:

142ccfdbe0dfa43aa2ab1a8bb85d788440071bf8

SHA-256:

6a126bc8ed9cc21c0b93947946991072f33bd2f5a530c6df2d65fdc1c6388ee6

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/16/2024 3:45:12 AM UTC (today)

File size:

134.3 KB (137,544 bytes)

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Program Files\indievolume\indievolume.hook.dll

Digital Signature

Signed by:

Andriy Gerasika

Authority:

GlobalSign nv-sa

Valid from:

11/9/2012 1:21:51 AM

Valid to:

11/9/2013 12:48:13 PM

Subject:

CN=Andriy Gerasika, C=UA

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

11212D96CC551B8AEB39D728871E5C574ADA

File PE Metadata

Compilation timestamp:

2/5/2013 1:19:12 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

1536:BAm2FP+2JYJDUNbv7+zc2XEmM2XwRlXRRZkKamcpu1oimCm+fzgHmC/Hvw7bE:6m2FGWngipkK1od+fEHmqHvUE

Entry address:

0x1B3D0

Entry point:

55, 8B, EC, 83, C4, C0, B8, 3C, 8C, 41, 00, E8, 6C, C6, FE, FF, E8, E3, 9B, FE, FF, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 32, 13, 00, 00, 00, 19, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 88, 20, 40, 00, B4, 20, 40, 00, DC, 20, 40, 00, 1C, 21, 40, 00, 28, 21, 40, 00, 30, 21, 40, 00, 3C, 21, 40, 00, 4C, 21, 40, 00, 50, 21, 40, 00... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

103 KB (105,472 bytes)

Scan indievolume.hook.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.