» SockEx.dll
Overview
Analysis
File Details
Programs (1)

SockEx.dll

Nicroman's SockEx

William Levra-Juillet

File name:

SockEx.dll

Publisher:

Nicolas Romantzoff (signed by William Levra-Juillet)

Product:

Nicroman's SockEx

Description:

SockEx

Version:

1.7.6 build 243

MD5:

34bc4e9f66243595a5e93f4fa6e10d32

SHA-1:

b7ad7d88d511855bece9148600023874cb4de36d

SHA-256:

353ecc9d1936f3ed5fbf9d9271609703d350a6722158acad44d98e6cbbd1cc53

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 9:33:41 PM UTC (today)

File size:

1.2 MB (1,300,032 bytes)

Original file name:

SockEx.dll

File type:

Dynamic link library (Win64 DLL)

Language:

Language Neutral

Common path:

C:\Program Files\directupdate v4\sockex.dll

Digital Signature

Signed by:

William Levra-Juillet

Authority:

COMODO CA Limited

Valid from:

8/7/2012 9:00:00 PM

Valid to:

8/8/2015 8:59:59 PM

Subject:

CN=William Levra-Juillet, O=William Levra-Juillet, STREET=101 Roebuck Castle, L=Clonskeagh, S=Dublin, PostalCode=14, C=IE

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

241D59C1D0F0AA4995A22C1E2A267679

File PE Metadata

Compilation timestamp:

5/31/2015 5:54:58 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

24576:yATZyHpfQG0/0w1Oz1QsFe69RDj67hVRns:EpfQb0w1O5QsFe676ts

Entry address:

0xB800C

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 1F, 04, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 8B, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, FF, 25, 22, 33, 00, 00, CC, CC, 40, 53, 48, 83, EC, 20, 45, 8B, 18, 48, 8B, DA, 4C, 8B, C9, 41, 83, E3, F8, 41, F6, 00, 04, 4C, 8B, D1, 74, 13, 41, 8B, 40, 08, 4D, 63, 50, 04, F7, D8, 4C, 03, D1, 48, 63, C8, 4C, 23, D1, 49, 63, C3, 4A, 8B... 
[+]

Entropy:

6.4120

Code size:

741 KB (758,784 bytes)

The file SockEx.dll has been discovered within the following program.

DirectUpdate by WildUP - William Levra-Juillet

Publisher's description - “DirectUpdate is a dynamic DNS updater that runs as a NT service with remote (web) administration. It integrates with many of the free or pay DNS services and you can automatically update multiple DNS accounts as soon as your IP changes.”

www.directupdate.net

8% remove it

Scan SockEx.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.