» PowerMockup.AddIn.dll
Overview
Analysis
File Details
Programs (1)

PowerMockup.AddIn.dll

PowerMockup

Wulfsoft

This is installed with PowerMockup.

File name:

Publisher:

Wulfsoft (signed and verified)

Product:

PowerMockup

Description:

PowerMockup Add-In

Version:

4.0.2.0

MD5:

6e00f07bf8e8117a2b3430decbfa320f

SHA-1:

e488ddcee5d41c20fe48e78c2082dbb25bafb108

SHA-256:

b0ce0a037a543e0a12e06d7e437f1f0d669803be1bc9905d0843156149b942a7

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/20/2024 4:06:21 AM UTC (today)

File size:

155.5 KB (159,248 bytes)

Product version:

4.0.2.0

Original file name:

PowerMockup.AddIn.dll

File type:

Dynamic link library (Win32 DLL)

Language:

Language Neutral

Common path:

C:\users\{user}\appdata\roaming\powermockup\powermockup.addin.dll

Digital Signature

Signed by:

Wulfsoft

Authority:

COMODO CA Limited

Valid from:

7/2/2012 8:00:00 AM

Valid to:

7/3/2017 7:59:59 AM

Subject:

CN=Wulfsoft, O=Wulfsoft, STREET=Hamburger Str. 2, L=Münster, S=North Rhine-Westphalia, PostalCode=48155, C=DE

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00A1B2A2383AD1D05B503198AE0404E735

File PE Metadata

Compilation timestamp:

5/27/2015 1:11:16 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

6.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

3072:hefzQGHUXefzHE/F8wYGRPpU5LB69aOgsvR0uo5PlRI64euxaV22AtRE2P4ywK:cIefzHsZoLJ5u8H724yJ

Entry address:

0x269C6

Entry point:

FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 60, 02, 00, 0C, 00, 00, 00, C8, 39, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00... 
[+]

Entropy:

6.7079

Developed / compiled with:

Microsoft Visual C# / Basic .NET

Code size:

146.5 KB (150,016 bytes)

The file PowerMockup.AddIn.dll has been discovered within the following program.

PowerMockup by Wulfsoft

www.powermockup.com

About 1% of users remove it

Scan PowerMockup.AddIn.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.