home

pshook64.dll

Sergey Moskalev

Publisher:
Sergey Moskalev  (signed and verified)

MD5:
615a9eb73f1966fd68caf7a653ade003

SHA-1:
078e57dad089646e3edbd00ee9dd3ba716d5756b

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/24/2024 8:30:04 PM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V0606
7.2.76

File size:
17.7 KB (18,112 bytes)

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\Program Files\punto switcher\pshook64.dll

Digital Signature
Signed by:
Sergey Moskalev

Authority:
The USERTRUST Network

Valid from:
3/31/2008 5:30:00 AM

Valid to:
4/1/2009 5:29:59 AM

Subject:
CN=Sergey Moskalev, OU=Punto, O=Sergey Moskalev, STREET=Bolshoy Kozikhinsky per. 23-36, L=Moscow, S=Moscow, PostalCode=123001, C=RU

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00B1CB2687F16C261F6F369A200825C00C

File PE Metadata
Compilation timestamp:
5/30/2008 6:40:55 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
384:QwmcoUBLgBffhSTBGsD7tCsF1Iyw/oips5gYJLhH5d:Q/BXhSTUKRPEywhsrL55d

Entry address:
0x2770

Entry point:
40, 53, 48, 83, EC, 20, 48, 8B, D9, 85, D2, 74, 71, 83, FA, 01, 0F, 85, BB, 00, 00, 00, FF, 15, EC, 08, 00, 00, 45, 33, C0, 33, D2, 33, C9, FF, 15, D7, 08, 00, 00, 48, 89, 05, 68, 18, 00, 00, 48, 85, C0, 75, 07, 33, C0, E9, 9A, 00, 00, 00, 48, 8B, 05, 4D, 18, 00, 00, 48, 85, C0, 75, 25, 8D, 48, 38, E8, 80, FF, FF, FF, 48, 85, C0, 74, 0A, 48, 8B, C8, E8, CB, FB, FF, FF, EB, 02, 33, C0, 48, 89, 05, 28, 18, 00, 00, 48, 85, C0, 74, C8, 48, 8B, D3, 48, 8B, C8, E8, 04, FF, FF, FF, 84, C0, 75, 55, EB, B7, 48, 8B...
 
[+]

Code size:
7.5 KB (7,680 bytes)

Scan pshook64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.