» sharew5.dll
Overview
Analysis
File Details

sharew5.dll

Blaise

Centraal Bureau voor de Statistiek (Statistics Netherlands)

File name:

sharew5.dll

Publisher:

Statistics Netherlands (signed by Centraal Bureau voor de Statistiek (Statistics Netherlands))

Product:

Blaise

Description:

Blaise 4.8 Samples Audit Component

Version:

4.8.3.1745

MD5:

dd965e4609ac6e10640c177ea82d2450

SHA-1:

aa62a29d8030e6ab25dc230142151c0e90d22fe3

SHA-256:

ec86e7d6c17000fb16d4aa40587d55e5f0946605f002fce5c5562014bcb92ac0

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/24/2024 11:53:23 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

Agnitum Outpost

Packed/PECompact

7.1.1

Bkav FE

HW32.Paked

1.3.0.4959

File size:

185.2 KB (189,624 bytes)

Product version:

4.8

Original file name:

Audit.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\ProgramData\centerdata\sharew5\temp\capidata\sharew5.dll

Digital Signature

Signed by:

Centraal Bureau voor de Statistiek (Statistics Netherlands)

Authority:

GlobalSign nv-sa

Valid from:

9/16/2010 10:14:01 AM

Valid to:

9/16/2012 10:13:55 AM

Subject:

E=blaise@cbs.nl, CN=Centraal Bureau voor de Statistiek (Statistics Netherlands), OU=Blaise, O=Centraal Bureau voor de Statistiek (Statistics Netherlands), L=Heerlen, S=Limburg, C=NL

Issuer:

CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:

0100000000012B19B1DC86

File PE Metadata

Compilation timestamp:

3/9/2012 9:58:18 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

3072:Wfv7CTJZl/SFHSxj+nFNd3wpk0C5vMP7HC7jHVRlZncbFfMtMb8msyYl8IDo6gZ8:WfvyJZjxjYFNd3PxNMPzC7rxZcbFktMG

Entry address:

0x7CDB3

Entry point:

B8, A0, DA, 47, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 00, 00, 08, E1, 48, 01, E9, 60, A0, 15, 83, EC, 2C, 8B, 1D, 44, 24, 30, 1F, 48, 03, 55, 56, BE, 01, 7E, 2D, 18, D6, D3, E2, 1C, 04, 57, F0, 78, 7B, 0C, E0, 2B, FA, 89, 68, 54, 3A, 13, 3C, 60, 4A, 2C, 03, C8, B8, E1, D3, 7D, 44, 18, E0, 33, ED, 33, 7C, 24, 0D, 18, 05, 36, 07, 1E, 9F, 45, 34, 5F, 74, 59, 10, 09, 20, 12, 1C, 2F, BF, 1F, 6C, 0C, 0C, C6, 64, 3C, E1, 83, 13... 
[+]

Packer / compiler:

PECompact v2

Code size:

381 KB (390,144 bytes)

Scan sharew5.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.