home

CitationXH.dll

PIC CitationX

Wilco Publishing

Publisher:
feelThere  (signed by Wilco Publishing)

Product:
PIC CitationX

Description:
feelThere CitationX helper module

Version:
1.0.0.1

MD5:
34ca8c7d39ffd1b7f43506825827b101

SHA-1:
3f95e65b81df861f56d24173b8e34803d319efaa

SHA-256:
31ffd4f554d72a421fc3da0ac2b22357f97b10030a554fd6eeef18f2057a4f88

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 7:49:51 PM UTC  (today)

File size:
57.7 KB (59,080 bytes)

Product version:
1.0.0.1

Copyright:
Copyright feelThere © 2003-2007

Original file name:
CitationXH.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\microsoft games\microsoft flight simulator x\feelthere\citationx\citationxh.dll

Digital Signature
Signed by:
Wilco Publishing

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
11/20/2006 7:00:00 PM

Valid to:
11/21/2007 6:59:59 PM

Subject:
CN=Wilco Publishing, OU=Développement d'application sécurisée, O=Wilco Publishing, L=Drogenbos, S=BE, C=BE

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
54483C76B26D61C8A47250E7A9ADBD6B

File PE Metadata
Compilation timestamp:
5/17/2007 4:42:14 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
768:0Dd+Y16HnC0f0Smxxe7mV1BitVthglHynoLD0I:4UHVAxe7u+thg8nof1

Entry address:
0x143A

Entry point:
83, 7C, 24, 08, 01, 75, 05, E8, 50, 17, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 8B, 44, 24, 04, A3, 00, AE, 00, 10, C3, 55, 8D, AC, 24, 58, FD, FF, FF, 81, EC, 28, 03, 00, 00, A1, 60, A2, 00, 10, 33, C5, 89, 85, A4, 02, 00, 00, 56, 89, 85, 88, 00, 00, 00, 89, 8D, 84, 00, 00, 00, 89, 95, 80, 00, 00, 00, 89, 5D, 7C, 89, 75, 78, 89, 7D, 74, 66, 8C, 95, A0, 00, 00, 00, 66, 8C, 8D, 94, 00, 00, 00, 66, 8C, 5D, 70, 66, 8C, 45, 6C, 66, 8C, 65, 68, 66, 8C, 6D, 64...
 
[+]

Entropy:
5.8564

Code size:
28 KB (28,672 bytes)

Scan CitationXH.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.