topjet.dll

Windows Topjet

Now Media Corp.

The module topjet.dll by Now Media has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Now Media Corp.  (signed and verified)

Product:
Windows Topjet

Version:
1.0.1.1

MD5:
1e73b3f55d6555265e5235acfef9caef

SHA-1:
eb1e91af598cdc35c79c984a538634cc6ae94cdd

SHA-256:
103a2f64381f883b85337980b667ca115b9fabb5730009574dbacf9fc137c46e

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/23/2024 6:42:14 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win32.Generic
16.2.8.17

File size:
314.6 KB (322,160 bytes)

Product version:
1.0.1.1

Original file name:
topjet.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\windows topjet\topjet.dll

Digital Signature
Signed by:

Authority:
Thawte, Inc.

Valid from:
4/23/2013 9:00:00 AM

Valid to:
5/24/2014 8:59:59 AM

Subject:
CN=Now Media Corp., OU=EC Team, O=Now Media Corp., L=Uijeongbu-si, S=Gyeonggi-do, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
749F0C73DD0E02A17770A43633F7EB21

File PE Metadata
Compilation timestamp:
10/25/2013 2:58:24 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:72f3iq53Op7puHnKTLmlnJ9hulNcrh8fzvZF:if3iq53OFwqGnJ9hul618vZF

Entry address:
0x29C6E

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 08, 7E, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, B8, D4, 25, 03, 10, A3, F8, 85, 04, 10, C7, 05, FC, 85, 04, 10, BB, 1C, 03, 10, C7, 05, 00, 86, 04, 10, 6F, 1C, 03, 10, C7, 05, 04, 86, 04, 10, A8, 1C, 03, 10, C7, 05, 08, 86, 04, 10, 11, 1C, 03, 10, A3, 0C, 86, 04, 10, C7, 05, 10, 86, 04, 10, 4C, 25, 03, 10, C7, 05, 14, 86, 04, 10, 2D, 1C, 03, 10, C7, 05, 18, 86, 04, 10, 8F, 1B, 03, 10, C7, 05, 1C, 86, 04, 10, 1C, 1B...
 
[+]

Entropy:
6.5566

Code size:
231.5 KB (237,056 bytes)

Remove topjet.dll - Powered by Reason Core Security