home

avlibrary.dll

AVSoftware EOOD

The module avlibrary.dll by AVSoftware EOOD has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
AVSoftware EOOD  (signed and verified)

MD5:
8a1598b27b6ee07177cc30dff4c2ab64

SHA-1:
8739a73f34d74edd85cc79a3588f0f6b06063761

SHA-256:
9261db912bae0b0d857bbc0188370c01e2a7c2a2f219e195624ab01b59d7ede5

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
10/31/2024 11:35:33 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.AVSoftware EOOD (M)
16.10.19.15

File size:
172.7 KB (176,808 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Windows\System32\avlibrary.dll

Digital Signature
Signed by:
AVSoftware EOOD

Authority:
Bankservice PLC

Valid from:
3/27/2009 10:07:42 AM

Valid to:
4/26/2010 10:07:42 AM

Subject:
Phone=00359888550158, E=company@avsoftware.org, PostalCode=5300, STREET="ul. Nikolaevska 22 et. 2 ap. 2,Gabrovo", T=Aleksandar Veselinov Savchev, CN=AVSoftware EOOD, OU=BULSTAT:200437750, OU=SR:IZH.20081030131818 / 30.10.2008 AP, OU=Otdel:Administratsia, OU=ObjectSigning Certificate, O=AVSoftware EOOD, L=Gabrovo, S="ul. Nikolaevska 22,Gabrovo,PK:5300", C=BG

Issuer:
Phone="+359 2 9 215 100", E=ca4@b-trust.org, PostalCode=1612, STREET="41, Tzar Boris III blvd.", CN=B-Trust Operational CA - Advanced Electronic Signature, OU=B-Trust, O=Bankservice PLC, L=Sofia, S=Sofia, C=BG

Serial number:
0F45F1

File PE Metadata
Compilation timestamp:
2/27/2009 11:16:55 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:tM3Gj28ZVE7i7hNeZHLPGijov7+DOhb3sxwM+E7bLZsEhYCtGo:uWjj0rhovVb6w+3bhYCF

Entry address:
0x15437

Entry point:
55, 8B, EC, 53, 8B, 5D, 08, 56, 8B, 75, 0C, 57, 8B, 7D, 10, 85, F6, 75, 09, 83, 3D, 70, 68, 02, 10, 00, EB, 26, 83, FE, 01, 74, 05, 83, FE, 02, 75, 22, A1, BC, 7F, 02, 10, 85, C0, 74, 09, 57, 56, 53, FF, D0, 85, C0, 74, 0C, 57, 56, 53, E8, E7, FE, FF, FF, 85, C0, 75, 04, 33, C0, EB, 4E, 57, 56, 53, E8, C9, 54, FF, FF, 83, FE, 01, 89, 45, 0C, 75, 0C, 85, C0, 75, 37, 57, 50, 53, E8, C3, FE, FF, FF, 85, F6, 74, 05, 83, FE, 03, 75, 26, 57, 56, 53, E8, B2, FE, FF, FF, 85, C0, 75, 03, 21, 45, 0C, 83, 7D, 0C, 00...
 
[+]

Entropy:
6.2137

Developed / compiled with:
Microsoft Visual C++

Code size:
116 KB (118,784 bytes)

Remove avlibrary.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.