home

tools.dll

Lenovo (United States) Inc.

This is installed with System Update.
Publisher:
Lenovo (United States) Inc.  (signed and verified)

MD5:
b52dc7e9259390f3dbee55feac6eff5d

SHA-1:
8c4257bf51a1495f03f8819a7aac703083d3eb10

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 9:32:48 PM UTC  (today)

File size:
105.6 KB (108,096 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\lenovo\system update\tools.dll

Digital Signature
Signed by:
Lenovo (United States) Inc.

Authority:
VeriSign, Inc.

Valid from:
4/17/2006 2:00:00 AM

Valid to:
4/17/2009 1:59:59 AM

Subject:
CN=Lenovo (United States) Inc., OU=7Z (1), OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Lenovo (United States) Inc., L=Research Triangle Park, S=North Carolina, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2E7AA35FE471238215757482F94C0656

File PE Metadata
Compilation timestamp:
2/12/2007 3:50:23 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
1536:mrHr2tFUor0QNpnZMxs7O5JkmqsDFgCNwJYCcZTVQlMIf:mrHr2tFTzau6F83mTVQlM

Entry address:
0x90D3

Entry point:
6A, 0C, 68, 40, 39, 01, 10, E8, 4D, 06, 00, 00, 33, C0, 40, 89, 45, E4, 8B, 75, 0C, 33, FF, 3B, F7, 75, 0C, 39, 3D, 00, 74, 01, 10, 0F, 84, B3, 00, 00, 00, 89, 7D, FC, 3B, F0, 74, 05, 83, FE, 02, 75, 31, A1, 68, 8C, 01, 10, 3B, C7, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D0, 89, 45, E4, 39, 7D, E4, 0F, 84, 85, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 22, FE, FF, FF, 89, 45, E4, 3B, C7, 74, 72, 8B, 5D, 10, 53, 56, FF, 75, 08, E8, 9E, 46, 00, 00, 89, 45, E4, 83, FE, 01, 75, 0E, 3B, C7, 75, 0A, 53, 57, FF...
 
[+]

Entropy:
6.2592

Developed / compiled with:
Microsoft Visual C++ v7.1

Code size:
68 KB (69,632 bytes)

The file tools.dll has been discovered within the following program.

System Update  by Lenovo
Lenovo System Update is the updater program which runs with Windows (in the background as a service) and automatically starts up when your computer boots. It checks for updates and automatically downloads and installs them if found based on the user's settings.
www.lenovo.com
18% remove it
 
Powered by Should I Remove It?

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.