home

xclientbase.dll

Tencent Technology(Shenzhen) Company Limited

Publisher:
Tencent Technology(Shenzhen) Company Limited  (signed and verified)

Version:
3, 0, 5, 59953

MD5:
8e5b7074f35a902b14a1aaaf08e1a590

SHA-1:
7d83b2e5153c5aaa432bdb059c34a4becddf8bcc

SHA-256:
5188e6a6de848235be7e9f3563e94c5e29b95ce9c8072dab62f789180eb7eb75

Scanner detections:
3 / 68

Status:
Clean  (3 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/26/2024 12:32:37 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Crypt.XPACK.Gen3
7.11.194.188

F-Prot
W32/Agent.I.gen
v6.4.7.1.166

NANO AntiVirus
Virus.Win32.Gen.ccmw
0.28.6.63850

File size:
10.7 MB (11,206,312 bytes)

Product version:
3, 0, 5, 59953

File type:
Dynamic link library (Win32 DLL)

Language:
Chinese (Simplified, PRC)

Digital Signature
Signed by:
Tencent Technology(Shenzhen) Company Limited

Authority:
VeriSign, Inc.

Valid from:
1/17/2013 7:00:00 AM

Valid to:
2/17/2016 6:59:59 AM

Subject:
CN=Tencent Technology(Shenzhen) Company Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Tencent Technology(Shenzhen) Company Limited, L=shenzhen, S=guangdong, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7170BD93CF3F189AE6452B514C49340E

File PE Metadata
Compilation timestamp:
12/6/2014 3:10:05 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:atJDTyumoj6EDorswdloE1meA3d+P3Ul0WWPof7DFUPz:SDTyuRDorPdloE1s38P9c/+Pz

Entry address:
0x1000

Entry point:
E9, 65, 46, 54, 00, 68, 8F, 68, 29, 2B, E8, 14, 56, 52, 00, EA, 8B, 04, 24, 8D, A4, 24, 04, 00, 00, 00, F7, D0, E9, FC, 06, 52, 00, 7A, C3, 7F, E9, C0, C1, 53, 00, 8D, 64, 24, 04, 5E, 5D, 8D, A4, 24, 20, 00, 00, 00, 9D, 55, 56, 9C, 33, ED, 03, AC, 24, 04, 00, 00, 00, 9D, 81, 8D, 00, 00, 00, 00, FF, FF, FF, FF, 52, 8B, 94, 24, 08, 00, 00, 00, 52, 8B, 94, 24, 04, 00, 00, 00, 89, 94, 24, 0C, 00, 00, 00, 5D, 5A, 5E, 87, AC, 24, 04, 00, 00, 00, 8D, A4, 24, 08, 00, 00, 00, E9, D6, F7, 57, 00, E3, 85, C9, 0F, 85...
 
[+]

Entropy:
7.6399

Packer / compiler:
Xtreme-Protector v1.05

Code size:
1.4 MB (1,477,632 bytes)

Scan xclientbase.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.