» WC8RUMD.DLL
Overview
Analysis
File Details
Programs (1)

WC8RUMD.DLL

WinLINE Classic V8

Software Mechanics Pty Ltd

This is installed with WinLINE Classic V8.

File name:

WC8RUMD.DLL

Publisher:

Software Mechanics Pty Ltd. (signed by Software Mechanics Pty Ltd)

Product:

WinLINE Classic V8

Description:

WinLINE User Mode Printer Driver

Version:

8.10.B405.64

MD5:

5b93bcb26eabb5c21d6dd611c4581934

SHA-1:

0c675ed213f1913f61c667945129c59d96c174a7

SHA-256:

ab856294e28209dd0973c9dfd7068ed3fb474d26fbb0482321cd8a3f59849126

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 7:44:57 AM UTC (today)

File size:

1.5 MB (1,573,280 bytes)

Product version:

8.10

Original file name:

WC8RUMD.DLL

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\winline classic v8\wc8rumd.dll

Digital Signature

Signed by:

Software Mechanics Pty Ltd

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

5/22/2010 5:00:00 PM

Valid to:

5/21/2012 4:59:59 PM

Subject:

CN=Software Mechanics Pty Ltd, OU=SECURE APPLICATION DEVELOPMENT, O=Software Mechanics Pty Ltd, L=Milton, S=Queensland, C=AU

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

7E4DE78C2B9CEF83AC58B2FE17D8C1B0

File PE Metadata

Compilation timestamp:

4/5/2011 12:10:06 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

24576:k/zH3Gsty7Z3dCFwaaMTcVZP0w1KNAFlpUqP9Nv04jSqgQy7ror3ppzJ34IWu+YK:SXGvUqPTvYp7a7AFoZO6Ni4Gdxp

Entry address:

0x126A57

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, FC, C6, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, B8, 00, 2C, 16, 10, C3, A1, A0, 60, 16, 10, 85, C0, 56, 6A, 14, 5E, 75, 07, B8, 00, 02, 00, 00, EB, 06, 3B, C6, 7D, 07, 8B, C6, A3, A0, 60, 16, 10, 6A, 04, 50, E8, E9, AD, 00, 00, 85, C0, 59, 59, A3, 9C, 50, 16, 10, 75, 1E, 6A, 04, 56, 89, 35, A0, 60, 16, 10, E8, D0, AD, 00, 00, 85, C0, 59, 59, A3, 9C, 50, 16, 10, 75, 05, 6A, 1A, 58, 5E, C3, 33, D2, B9, 00, 2C, 16, 10, EB, 05... 
[+]

Entropy:

6.6035

Code size:

1.2 MB (1,306,624 bytes)

The file WC8RUMD.DLL has been discovered within the following program.

WinLINE Classic V8 by Software Mechanics Pty Ltd

www.winline.com

About 9% of users remove it

Scan WC8RUMD.DLL - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.