home

itdownload.dll

Clue Norge ASA

Publisher:
Clue Norge ASA  (signed and verified)

MD5:
00c0b259ea3cb1a4ddc491442a9e2a42

SHA-1:
fb98e5881ffa8eea119c6022b861e2c1c08832fa

SHA-256:
dd40658ca5ca4f7ee9e9db80f47afa70fd17543da60dc6d3202fdc83c3236931

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 5:02:02 AM UTC  (today)

File size:
487.5 KB (499,184 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\itdownload.dll

Digital Signature
Signed by:
Clue Norge ASA

Authority:
Thawte, Inc.

Subject:
CN=Clue Norge ASA, O=Clue Norge ASA, L=Oslo, S=Oslo, C=NO

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
3BEB0029BB9D7A027D5D8C09E221FE6A

File PE Metadata
Compilation timestamp:
1/16/2014 10:49:32 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6144:5vv8122iWyC1LTOOvzO3o0CBAYe6z4AUcvmVTtifeb2ZlfELLjX9Kz:5a22aC1L6O7XAYQmSTtimb2rELLT6

Entry address:
0x6BA14

Entry point:
55, 8B, EC, 83, C4, C0, B8, D8, 7C, 46, 00, E8, D4, EC, F9, FF, E8, 5B, AA, F9, FF, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
426 KB (436,224 bytes)

Scan itdownload.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.