home

pktask.dll

Process

Teknix India

Publisher:
Teknix India  (signed and verified)

Product:
Process

Version:
1.00

MD5:
1dc58eab6d1e2a9acdbdaf324bc730c9

SHA-1:
e7679ea86b8c9a6d711d2e33e72d828df6eaf5d5

SHA-256:
6ae9f14ede3b507ab2cec130e40f49a2d8b5d74999961c29ca3f3058aeeaf35a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/18/2024 10:04:51 AM UTC  (today)

File size:
30.1 KB (30,864 bytes)

Product version:
1.00

Original file name:
ProcessKiller.exe

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\hotel booking and billing\pktask.dll

Digital Signature
Signed by:
Teknix India

Authority:
COMODO CA Limited

Valid from:
2/18/2014 2:00:00 AM

Valid to:
2/19/2015 1:59:59 AM

Subject:
CN=Teknix India, OU=IT Department, O=Teknix India, POBox=700056, STREET="1/A, Shyama Charan Chatterjee Street, Belghoria", L=Kolkata, S=West Bengal, PostalCode=700056, C=IN

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0096BADEF792E08813C699051D87286FCA

File PE Metadata
Compilation timestamp:
11/6/2014 4:02:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
384:glPLx6PjqJwGbngcoDkrIuvFqo0Gn5HCxMMC18/8bK:glPkPjNsgcQk915ixh/8W

Entry address:
0x12CC

Entry point:
68, D8, 18, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 68, 00, 00, 00, 48, 00, 00, 00, FC, 4A, B0, C9, EC, 06, AD, 4A, 9A, A0, 79, D0, 69, 60, 28, E4, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 50, 72, 6F, 63, 65, 73, 73, 4B, 69, 6C, 6C, 69, 6E, 67, 54, 75, 74, 6F, 72, 69, 61, 6C, 00, 00, 50, 72, 6F, 63, 65, 73, 73, 20, 4B, 69, 6C, 6C, 69, 6E, 67, 20, 54, 75, 74, 6F, 72, 69, 61, 6C, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, FF, CC, 31, 00, 04, 5B, 44, CD...
 
[+]

Entropy:
4.1831

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
12 KB (12,288 bytes)

Scan pktask.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.