» xls2041.dll
Overview
Analysis
File Details

xls2041.dll

XLS Padlock

G.D.G. Software SARL

File name:

xls2041.dll

Publisher:

G.D.G. Software (signed by G.D.G. Software SARL)

Product:

XLS Padlock

Description:

XLS Padlock Runtime

Version:

1.2.0.0

MD5:

921cb5a155707259b62e5ce0f418f98f

SHA-1:

0a4b68a467f3de3fc82d14910865168855563117

SHA-256:

68c26784acd493a989656f7924d3c57b62588a5d3b2abae7f558246067c89f56

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/27/2024 12:53:17 AM UTC (today)

Scan engine

Detection

Engine version

Trend Micro House Call

TROJ_GEN.F47V1210

7.2.9

File size:

1.3 MB (1,410,968 bytes)

Product version:

1.2.0.0

Trademarks:

XLS Padlock, http://www.xlspadlock.com

Original file name:

XLSPadlockStub.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\temp\xls2041.dll

Digital Signature

Signed by:

G.D.G. Software SARL

Authority:

COMODO CA Limited

Valid from:

3/29/2012 5:30:00 AM

Valid to:

3/30/2016 5:29:59 AM

Subject:

CN=G.D.G. Software SARL, O=G.D.G. Software SARL, STREET=6 rue de la Vire, L=Marly, S=Lorraine, PostalCode=57155, C=FR

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00DA95128D9C375672176390E01A3E6B19

File PE Metadata

Compilation timestamp:

12/8/2013 9:52:04 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:/aH4v9g9npxjBQ05AcyKKB6egfhlcKdH7OUzJW0BEuWgUZmK4LhK5onTw:64Fe7jBvKgegfUEH7OUE0BEuWgUZsLw9

Entry address:

0x452000

Entry point:

EB, 04, 3D, 5B, 33, F8, 50, EB, 03, F2, A3, E8, E8, 13, 00, 00, 00, EB, 01, 28, EB, 03, E9, 8D, D1, 33, C0, EB, 02, 11, AC, 71, 5A, EB, 01, 85, EB, 03, E9, 10, 20, B8, 37, 48, F0, F6, EB, 01, DA, EB, 02, 11, 5E, 05, C9, B7, 0F, 09, EB, 01, 71, 75, 3C, EB, 02, 38, 6B, 64, FF, 30, EB, 04, 19, AE, A9, AF, 64, 89, 20, EB, 01, 82, EB, 01, 76, 8B, 10, EB, 04, 10, 9C, EC, 28, 64, 8F, 00, EB, 05, 3E, BC, AD, A8, 06, 83, C4, 04, EB, 02, C8, EF, 58, EB, 04, 35, 21, ED, C3, C3, EB, 03, DB, 67, 44, EB, 02, 19, 74, 8B... 
[+]

Entropy:

7.9965 (probably packed)

Code size:

2.2 MB (2,283,520 bytes)

Scan xls2041.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.