» wineks-ansi.dll
Overview
Analysis
File Details

wineks-ansi.dll

abas-ERP GUI for Windows 2000/XP/2003/Vista/2008/7 and Linux

ABAS Software AG

File name:

wineks-ansi.dll

Publisher:

ABAS Software AG (signed and verified)

Product:

abas-ERP GUI for Windows 2000/XP/2003/Vista/2008/7 and Linux

Description:

abas-ERP

Version:

2010,2,11,00

MD5:

44f7c05ef6128f09336890a80d594027

SHA-1:

7a37f8bf51b25faabfcfeb4799e3f8097dfdbce2

SHA-256:

ca25775ecb4d2d3a42efc05f49d1f57c3f92e4ea1b2b39fc286806e10b666ff9

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/6/2024 8:39:41 PM UTC (today)

File size:

6 MB (6,296,704 bytes)

Product version:

2010,2,11,00

Original file name:

wineks.exe

File type:

Dynamic link library (Win32 DLL)

Language:

Language Neutral

Digital Signature

Signed by:

ABAS Software AG

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

1/29/2009 1:00:00 AM

Valid to:

2/15/2011 12:59:59 AM

Subject:

CN=ABAS Software AG, O=ABAS Software AG, L=Karlsruhe, S=Germany, C=DE

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

12928A365696D326ED780EEDB17B086A

File PE Metadata

Compilation timestamp:

11/22/2010 11:40:03 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:fKY1UzcLw/oyIkfckAfNXCB3EBiYQtJNr2qDgEFT+6jmLz98CpsTG1hLAT0UDt0c:pw/9R3E+JNVtgSCCTG8DqkjF

Entry address:

0x39E61F

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 56, 56, 01, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 83, 7D, 0C, 00, 74, 06, C6, 01, 2D, 41, F7, D8, 56, 8B, F1, 33, D2, F7, 75, 08, 83, FA, 09, 76, 05, 80, C2, 57, EB, 03, 80, C2, 30, 88, 11, 41, 85, C0, 77, E7, C6, 01, 00, 49, 8A, 16, 8A, 01, 88, 11, 49, 88, 06, 46, 3B, F1, 72, F2, 5E, 5D, C2, 08, 00, 8B, FF, 55, 8B, EC, 83, 7D, 10, 0A, 8B, 45, 08, 75, 0A, 85, C0, 7D, 06, 6A, 01, 6A, 0A, EB, 05, 6A... 
[+]

Code size:

4.3 MB (4,512,768 bytes)

Scan wineks-ansi.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.