elevationlib.dll

Comograma P I Lda

Publisher:
Comograma P I Lda  (signed and verified)

MD5:
b0aaa3d2072ef5aa44d04f4fd8fd2f5e

SHA-1:
8b787936da7aa81482f250732040bc186521fad9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 1:28:52 PM UTC  (today)

File size:
408.8 KB (418,656 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Windows\System32\elevationlib.dll

Digital Signature
Authority:
Comograma P I Lda

Valid from:
1/1/2008 12:00:00 AM

Valid to:
12/31/2020 12:00:00 AM

Subject:
CN="Comograma, Lda.", OU="", O=Comograma P I Lda, L=Coimbra, S="", C=PT

Issuer:
CN="Comograma, Lda.", OU="", O=Comograma P I Lda, L=Coimbra, S="", C=PT

Serial number:
00

Registration
CLSID:
{6BCFB187-C1DD-4807-96AD-F91AB4AB08AC}

ProgID:
ElevationLib.MyPrivilegedObject

COM registered:
Yes

File PE Metadata
Compilation timestamp:
6/1/2010 12:47:28 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:Uuntv4XkKoxOsMyqZhWw888888888888W88888888888g:Pv40KMOsmM

Entry address:
0x4F9B0

Entry point:
55, 8B, EC, 83, C4, C0, B8, B4, C9, 44, 00, E8, 90, A6, FB, FF, E8, 83, 65, FB, FF, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 02, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 32, 13, 8B, C0, 00, 8D, 40, 00, 00, 8D, 40, 00...
 
[+]

Entropy:
6.4328

Developed / compiled with:
Microsoft Visual C++

Code size:
314.5 KB (322,048 bytes)

Scan elevationlib.dll - Powered by Reason Core Security