home

blackbox_1.dll

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

MD5:
528159d18d401f4afc6274da582f3367

SHA-1:
2bf38748f16ca27c978a2ecbb6be98f61c379401

SHA-256:
7e2e6bb6b93f07390fe59148e545427fbe19788ef03d063ba6152751ba909660

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/25/2024 8:59:21 PM UTC  (today)

File size:
726 KB (743,424 bytes)

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\users\{user}\downloads\$recycle.bin\s-1-5-21-1293156197-124732474-4084074861-1001\$rl97dlj.002\windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.1.7601.17514_none_7035852e230f0754\blackbox_1.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
5/16/2013 1:48:57 PM

Valid to:
8/16/2014 1:48:57 PM

Subject:
CN=Microsoft Windows Hardware Compatibility Publisher, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Hardware Compatibility PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000000B19302C31B264785D00010000000B

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
6144:+epkCQnDhrmSVJMnJRF5220ehX/Wa4VwPbbA9hreYorJRFmGeMHdOetoCFwx7cXr:zCt1mSVMJLBea4goT1orVneMHdBApcXr

Entry point:
30, 83, 02, 43, 88, 06, 09, 2A, 86, 48, 86, F7, 0D, 01, 07, 02, A0, 83, 02, 43, 78, 30, 83, 02, 43, 73, 02, 01, 01, 31, 0B, 30, 09, 06, 05, 2B, 0E, 03, 02, 1A, 05, 00, 30, 83, 02, 28, 3D, 06, 09, 2B, 06, 01, 04, 01, 82, 37, 0A, 01, A0, 83, 02, 28, 2D, 30, 83, 02, 28, 28, 30, 0C, 06, 0A, 2B, 06, 01, 04, 01, 82, 37, 0C, 01, 01, 04, 10, D6, 30, 60, D4, AC, B2, FF, 4A, B6, B5, 65, 28, 01, 47, 35, 49, 17, 0D, 31, 33, 30, 38, 30, 31, 30, 32, 32, 39, 31, 38, 5A, 30, 0E, 06, 0A, 2B, 06, 01, 04, 01, 82, 37, 0C, 01...
 
[+]

Entropy:
7.2484

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.