| File Name | Byjuansekill.dll |
| File Type |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Scanner Version | 1.0.231.174 |
| Database Version | 2025-12-27 01:00:38 UTC |
No threats detected by our scanner
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
3de3914bcbda687726caf180ff03e70a
|
|
| SHA1 |
5bc13a2ab42aa4246eb9a8fcfb1a4137f2014c98
|
|
| SHA256 |
145cc9d028580d94c47f3eace2d5d1278b2fb777e5ad1b196ed3ed91ac15b72a
|
|
| SHA512 |
85100922c8958322b5d3a07d0d7d66987208386439eb2b99275520c8f9fe6e8247286931fc8b4851e3ffcf5466e1531f73b9c4d549d9d8921d7b458e62777946
|
|
| ImpHash |
8abc6f663e679013cf2aa6d5fd71d185
|
| Image Base | 0x180000000 |
| Entry Point | 0x1800105d0 |
| Compilation Time | 2025-12-12 11:19:59 |
| Checksum | 0x0002b786 (Actual: 0x0002b786) |
| OS Version | 6.0 |
| PEiD Signatures |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Digital Signature | Chain verification from CN=Juansekill (serial:100603618239289339620881381347697393451, sha1:6d998506a43603e4e53d76c498152d5319737e4f) failed: The X.509 certificate provided is self-signed - "Common Name: Juansekill" |
| Imports | 15 libraries |
| Exports | 0 functions |
| Resources | 1 Resources |
| Sections | 6 Sections |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
67,159 bytes | 67,584 bytes | 6.39 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
4257D272D1666AE78DD67CB1539427D3 |
.rdata |
0x00012000 |
29,088 bytes | 29,184 bytes | 5.51 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
2D100C51C551680DEAC78CA69DD34957 |
.data |
0x0001a000 |
227,232 bytes | 6,656 bytes | 1.05 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
4C9282B31920A725244392979C177BB7 |
.pdata |
0x00052000 |
3,624 bytes | 4,096 bytes | 4.56 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
9D694C46AB732D09B184647D78DF5D18 |
.rsrc |
0x00053000 |
480 bytes | 512 bytes | 4.72 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
AE611731AB890471D7C67E6CB4578852 |
.reloc |
0x00054000 |
184 bytes | 512 bytes | 2.42 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
6F104DEC8D65533CF7E4AC6C25E9B508 |
| Resource Type | Count | Total Size | Percentage |
|---|---|---|---|
| RT_MANIFEST | 1 | 381 bytes |
| Signing Date | 11:42 AM 12/12/2025 (28 days ago) |
| Verification Status | A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider. |
| Signers | Juansekill |
4B AF 8D 55 A4 E2 4D B0 49 E5 DF 35 8A 38 7F 2BA4 29 3B 6E 1E DD D7 A7 34 08 87 AD 7A 4E B7 247A 23 AE DA 53 69 96 0F 91 C8 3E 5C F4 C7 E3 3F36 C2 B0 BD 7C 1B 3A E7 A3 B3 DD 36 CB C9 75 68✓ This file has been digitally signed and the certificate chain has been verified
Chain verification from CN=Juansekill (serial:100603618239289339620881381347697393451, sha1:6d998506a43603e4e53d76c498152d5319737e4f) failed: The X.509 certificate provided is self-signed - "Common Name: Juansekill"
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!