Should I block it?
90% of PCs block this file from running.
Possible reason:
Multiple malware detections
Additional versions
(Note, the developer publishes each variation of this file with the same version, but the hashes are unique.)
 PE file structure
|
Show functions |
Import table
gdi32.dll
GetObjectType, GetCurrentObject, GetObjectA, GdiAlphaBlend, GetDeviceCaps, GdiGradientFill, GdiTransparentBlt
kernel32.dll
LoadLibraryA, VirtualProtect, GetModuleFileNameA, CreateFileA, GetFileSize, SetLastError
Export table
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
msimg32.dll
| MD5: | 67c393f063036e0aec98de6f5700341b |
| SHA1: | 432e4a16f55b867754abd2aab1faa5363932028b |
| SHA256: | 36e27da8d0ab2a0cd4fcfec884c4f6927d7aed54b4a6302ee3defd535a65816f |
Warning 9 antivirus scanners has detected malware.
Overview
msimg32.dll is malware that is loaded as dynamic link library that runs in the context of a process. It is installed with a couple of know programs including DAEMON Tools Pro 5.1.0.0333 published by l-rePack, DAEMON Tools Pro from Disc Soft Ltd and DAEMON Tools Pro by Disc Soft Ltd.
Details
| File name: | msimg32.dll |
| Typical file path: | C:\Program Files\daemon tools pro\msimg32.dll |
| Size: | 2 KB (2,048 bytes) |
| Build date: | 4/27/2012 4:18 AM |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
DAEMON Tools (short for Disk And Execution MONitor tools) is a virtual drive and optical disc authoring program for Microsoft Windows. Mount *.mdx, *.mds/*.mdf, *.iso, *.b5t, *.b6t, *.bwt, *.ccd, *.cdi, *.bin/*.cue, *.ape/*.cue, *.flac/*.cue, *.nrg, *.isz disc images to a virtual drive. Create .iso, *.mds/*.mdf and *.mdx images of CD, DVD, Blu-ray discs.
Some versions of the software use the Somoto BetterInstaler to bundle various ad...
DAEMON Tools (short for Disk And Execution MONitor tools) is a virtual drive and optical disc authoring program for Microsoft Windows.
Note, the free and trial versiosn of the program bundles a number of additional adware-type products during installation under the notation of a 'Special Offer'. Although this is an optional install, it is checked by default and can be easily overlooked. As of now, it currently bundles various Condui...
Some versions of DAEMON Tools Ultra use the Somoto download and installer manager that bundles a variety of offers such as: music and games addon, search engines, price compression and many others. This includes a custom Somoto branded Disc Soft Ltd DAEMON Toolbar.
Malware detections
Based on 40+ industry antivirus scanners, 9 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| AVG |
13.0.0.3169 |
Crack.AQL |
| Baidu Antivirus |
3.5.1.41473 |
Malware.Win32.RiskTool.40 |
| CAT Quick Heal |
9.13.12.00 |
HackTool.Keygen (Not a Virus) |
| Commtouch |
5.4.1.7 |
W32/Trojan.QPXW-1886 |
| Ikarus |
T3.1.5.4.0 |
possible-Threat.Crack.DaemonT |
| Kingsoft |
2013.4.9.267 |
Win32.Troj.flat.a.(kcloud) |
| McAfee Gateway Anti-Malware |
v2013-dat |
Heuristic.BehavesLike.Win32.Suspicious-BAY.K |
| Microsoft Security Essentials |
1.9901.0 |
HackTool:Win32/Keygen |
| VIPRE Antivirus |
21966 |
HackTool.Win32.Keygen |
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
33.33% |
|
| Windows 8 Pro with Media Center |
33.33% |
|
| Windows 7 Ultimate |
33.33% |
|
Distribution by country
Malaysia installs about 33.33% of msimg32.dll.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
40.00% |
|
| Lenovo |
40.00% |
|
| Acer |
20.00% |
|
