Gridinsoft Logo

The ONToolbox.dll (onOne Toolbox) File Analysis

Updated 2 months ago
Checked by Malware Check
ONToolbox.dll

Technical Analysis

File Name ONToolbox.dll
File Type
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Scanner Version 1.0.227.174
Database Version 2025-10-18 20:00:20 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
573,880
File Size (bytes)
2025-10-18
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
fc232e97995b92677a21d7bc55d40ad4
SHA1
4f28e29dee30a701add3a42e4d5bf948dc50307f
SHA256
f1d0ddeaff3593bbbeffd510bb0f5d0d4be9a2f9f17f85500877e125246d6c66
SHA512
29e0e8cc5a946a7454cfd47abe4d4842466d1fdba0f30e6afb6d25affd63259a3a078831f16619b5b6706eb994a748f289d9a7e60281942fd701bea2a1edffcb
ImpHash
1b1a028b3cfb81e65393eec4b56f08be

PE Analysis

Basic Information

▼
Image Base 0x180000000
Entry Point 0x180042be0
Compilation Time 2025-10-09 17:35:51
Checksum 0x0008c70c (Actual: 0x00093b0f)
OS Version 6.0
PEiD Signatures PE32+ executable (DLL) (GUI) x86-64, for MS Windows
PDB Path E:\Jenkins\ON1-master\Suite\build\x64\Release\ONToolbox.pdb
Digital Signature The expected hash does not match the digest in SpcInfo
Imports 21 libraries
Exports 427 functions
Resources 2 Resources
Sections 7 Sections

Version Information

▼
CompanyName ON1
FileDescription onOne Toolbox
FileVersion 1.0.0.1
InternalName ONToolbox.dll
LegalCopyright (c) 2017 ON1, Inc. All rights reserved.
OriginalFilename ONToolbox.dll
ProductName onOne Toolbox
ProductVersion 1.0.0.1
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 306,457 bytes 306,688 bytes 6.13 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ B9279057F4EF1A803BDC359BC4358E45
.rdata 0x0004c000 220,902 bytes 221,184 bytes 5.93 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ EE27A6ABCF1E3223500E7591C9765EE9
.data 0x00082000 13,056 bytes 8,192 bytes 3.29 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F20BB9F695B8F2184E01E27040A0A8B9
.pdata 0x00086000 17,496 bytes 17,920 bytes 5.52 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C2A33E208C39B233EB6CB4C1BC33A809
.qtversi 0x0008b000 16 bytes 512 bytes 0.14 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ 7DF4415AC99F0709DBA6F0116EA81AAA
.rsrc 0x0008c000 1,280 bytes 1,536 bytes 3.67 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3E9FF35A5F431D78A0BA88FDCE7087DE
.reloc 0x0008d000 5,784 bytes 6,144 bytes 5.36 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 6B76A437FF644ADADC39CEAE3DCE58EC

Resource Analysis

▼
Total Resources: 2 (1,113 bytes)
Resource Type Count Total Size Percentage
RT_VERSION 1 732 bytes
65.8%
RT_MANIFEST 1 381 bytes
34.2%

Certificate Chain Analysis

▼
Certificate Information
Product onOne Toolbox
Description onOne Toolbox
File Version 1.0.0.1
Original Name ONToolbox.dll
Signing Date 05:56 PM 10/09/2025 (91 days ago)
Verification Status The digital signature of the object did not verify.
Signers Onone Software, Inc; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert SHA256 RSA4096 Timestamp Responder 2025 1; DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1; DigiCert Trusted Root G4; DigiCert
Internal Name ONToolbox.dll
Copyright (c) 2017 ON1, Inc. All rights reserved.
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Onone Software, Inc #2 Chain
Validity Period: 2024-01-16 00:00:00 → 2027-03-08 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0E 0D 96 45 F8 DC B1 CD 61 76 C7 66 AA 8B 00 D5
DigiCert SHA256 RSA4096 Timestamp Responder 2025 1 #3 Chain
Validity Period: 2025-06-04 00:00:00 → 2036-09-03 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0A 80 EF 18 4B 8D F1 05 82 D1 C4 76 A7 95 74 68
DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1 #4 Chain
Validity Period: 2025-05-07 00:00:00 → 2038-01-14 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0D C7 AC 57 05 FF 21 99 2E 40 43 22 0C 3A 49 86
DigiCert Trusted Root G4 #5 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware