home

um.dll

DOTFIX SOFTWARE

This is installed with VB Decompiler Pro.
Publisher:
DOTFIX SOFTWARE  (signed and verified)

MD5:
a5b26f5df47ffd2dfa6db883237e6d46

SHA-1:
3bbeabf7a31d00434a654cf44c0f80ea93df8d5c

SHA-256:
05f0b31a838e8e0f20657bb5b6d83788c8e0972e2519302324103d9c6989961a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 1:06:23 PM UTC  (today)

File size:
59.7 KB (61,120 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\vb decompiler pro\um.dll

Digital Signature
Signed by:
DOTFIX SOFTWARE

Authority:
VeriSign, Inc.

Valid from:
7/10/2011 4:00:00 AM

Valid to:
7/10/2012 3:59:59 AM

Subject:
CN=DOTFIX SOFTWARE, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=DOTFIX SOFTWARE, L=Tula, S=Tulskaya obl., C=RU

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6B078FDCA54C390683B44D59AB1B726B

File PE Metadata
Compilation timestamp:
4/25/2007 10:05:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
768:xwXlXh2ivQzkuB7wGoMuXFrX+zDVi7RspBpsLRQtJiYMNvEo:xWlXo3ku2KgrXKVi7ypBOetJEz

Entry address:
0x32FE

Entry point:
83, 7C, 24, 08, 01, 75, 05, E8, AC, 28, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, CC, 55, 8B, EC, 53, 56, 57, 55, 6A, 00, 6A, 00, 68, 38, 33, 00, 10, FF, 75, 08, E8, E6, 5B, 00, 00, 5D, 5F, 5E, 5B, 8B, E5, 5D, C3, 8B, 4C, 24, 04, F7, 41, 04, 06, 00, 00, 00, B8, 01, 00, 00, 00, 74, 32, 8B, 44, 24, 14, 8B, 48, FC, 33, C8, E8, 25, F9, FF, FF, 55, 8B, 68, 10, 8B, 50, 28, 52, 8B, 50, 24, 52, E8, 14, 00, 00, 00, 83, C4, 08, 5D, 8B, 44, 24, 08, 8B, 54, 24, 10, 89...
 
[+]

Entropy:
6.1915

Code size:
32 KB (32,768 bytes)

The file um.dll has been discovered within the following program.

VB Decompiler Pro  by DotFix Software
Publisher's description - “VB Decompiler is decompiler for programs (EXE, DLL or OCX) written in Visual Basic 5.0 and 6.0 and disassembler for programs written on .NET technology. As you know, programs in Visual Basic can be compiled into interpreted p-code or into native code. .”
www.vb-decompiler.org
5% remove it
 
Powered by Should I Remove It?

Scan um.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.