home

UM3_RESTORE.dll

Addware

EDV SUPPORT Hartlaub GmbH

Publisher:
EDV SUPPORT Hartlaub GmbH  (signed and verified)

Product:
Addware

Version:
1.01.0009

MD5:
95ca024c95abef7fadc83b46310687ae

SHA-1:
108ec49401ad695868c89649f752e491e0980dc3

SHA-256:
9d738d2b56db5a4c3740dc181b0fe0eec9a6060453c780e2af9db94d87f87197

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/3/2025 12:14:23 PM UTC  (today)

File size:
591.2 KB (605,392 bytes)

Product version:
1.01.0009

Copyright:
2009

Trademarks:
Addware

Original file name:
UM3_RESTORE.dll

File type:
Dynamic link library (Win32 DLL)

Language:
German (Germany)

Common path:
C:\Program Files\addware\urlaubsmanager3\plugins\um3_restore.dll

Digital Signature
Signed by:
EDV SUPPORT Hartlaub GmbH

Authority:
VeriSign, Inc.

Valid from:
2/9/2010 1:00:00 AM

Valid to:
2/10/2011 12:59:59 AM

Subject:
CN=EDV SUPPORT Hartlaub GmbH, OU=Addware, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=EDV SUPPORT Hartlaub GmbH, L=Niedernberg, S=Bayern, C=DE

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
787FC5CE19B142ECF2B4C181F92E307D

Registration
CLSID:
{23E63834-D59F-49E6-A808-36BF5BAEAE33}

ProgID:
UM3_RESTORE.Plugin

COM registered:
Yes

File PE Metadata
Compilation timestamp:
2/16/2009 4:57:09 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:dV7D0U4AtEzKF0DteIkQ0vIKCe7PKRRSgHKe+Ime346Yp3bb9RtImHhqOSYs1JQ:77QNAtm3j0Dp3blq1YGQ

Entry address:
0x4A94

Entry point:
5A, 68, C4, 91, 08, 11, 68, C8, 91, 08, 11, 52, E9, E9, FF, FF, FF, 00, 00, 00, 68, 00, 00, 00, 30, 00, 00, 00, 60, 00, 00, 00, 40, 00, 00, 00, 83, F3, 11, 1C, 58, D0, 81, 44, 81, AB, 2F, 46, 15, D7, 46, BA, 00, 00, 00, 00, 00, 00, 14, 00, 00, 00, 41, 00, 06, 50, 83, 02, 55, 4D, 33, 5F, 52, 45, 53, 54, 4F, 52, 45, 00, 6C, 55, FB, 00, 55, 72, 6C, 61, 75, 62, 73, 6D, 61, 6E, 61, 67, 65, 72, 20, 33, 20, 52, 65, 73, 74, 6F, 72, 65, 20, 54, 6F, 6F, 6C, 00, FC, 00, 00, 00, 00, 00, 2D, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v6.0

Code size:
536 KB (548,864 bytes)

Automation Object
CLSID:
{23E63834-D59F-49E6-A808-36BF5BAEAE33}

CLSID name:
UM3_RESTORE.Plugin


Scan UM3_RESTORE.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.