DiskDefrag_Scheduler.dll file report

MD5 968e4afd1a3de39b2a3869f9e8f3e95c
Latest seen 2021-11-15 21:29:42 (4 years ago)
First seen 2021-11-15 21:29:42 (4 years ago)
Size 414 KB
Publisher Ausl˜ogics
Product Di˜sk Defrag

This report summarizes the file identity, detection status, publisher metadata, observed locations, and technical indicators for DiskDefrag_Scheduler.dll. ThreatInfo does not have a final classification for this sample yet.

DiskDefrag_Scheduler.dll is a Windows file recorded in the ThreatInfo database. It is associated with Di˜sk Defrag. The reported company name is Ausl˜ogics. The current detection status is Undefined, based on the latest analysis from 2021-11-15 21:29:42 (4 years ago).

ThreatInfo does not have a final classification for this file yet. Use the technical details below to compare the hash, size, signature, and observed locations with the copy found on your device.

Product Name: Di˜sk Defrag
Company Name: Ausl˜ogics
MD5: 968e4afd1a3de39b2a3869f9e8f3e95c
Size: 414 KB
First Published: 2021-11-15 21:29:42 (4 years ago)
Latest Published: 2021-11-15 21:29:42 (4 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2021-11-15 21:29:42 (4 years ago)
Signed By: Auslogics Labs Pty Ltd
Status: Valid

The signature on DiskDefrag_Scheduler.dll is reported as valid. A valid signature helps confirm publisher identity, but it does not automatically make the file safe if the installer was bundled, abused, or downloaded from an untrusted source.

%sysdrive%\programs

ThreatInfo has observed DiskDefrag_Scheduler.dll in the locations listed above. Files found in temporary folders, user profile folders, startup locations, or unusual application directories should be reviewed more carefully than files installed under a known program directory.

100.0%

The strongest geographic signal for this file is Ukraine with 100.0% of observed hits. Geographic distribution can help identify targeted campaigns, regional software bundles, or where a file is most commonly reported.

Windows 10 100.0%

The most common operating system signal for DiskDefrag_Scheduler.dll is Windows 10 with 100.0% of observed hits. If your system differs from the common profile, check whether the file was introduced by a specific installer, archive, or removable device.

DiskDefrag_Scheduler.dll is identified as pe for 32 systems. The subsystem is Windows GUI. PE header values are useful for triage, especially when they do not match the expected publisher, product, or release timeline.

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0002e7ec

PE Sections:

Name Size of data MD5
.text 181760 04dc28a63e71004ceaaa177a7dc862dd
.itext 2560 83e67759b4786834592ecaea37e6c988
.data 3584 74a310e20c53942dbfe51c7a67d2eec4
.bss 0 d41d8cd98f00b204e9800998ecf8427e
.idata 51200 303eff1957ca762bb21bcb025db09888
.edata 512 16cb91c893641a42adbe9e8ea52ed400
.rdata 512 db5c25175dfaa343a760a5c0a7afeec2
.reloc 15360 7e2c961e1daef9d01efe93bd3f990c6e
.rsrc 57856 dc726a123cc1fc05a27d9e370d5d14e5
.xdata 94720 01c93592a7e4504190b42a0f9fc0748b

PE section names and hashes can reveal packing, injected resources, or unusual build artifacts. Sections with uncommon names, very large raw data, or hashes that differ from a trusted copy deserve additional review.

More information: