home

libamem_plugin.id_1047903.dll

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

MD5:
039c8d64d1ed563ffe8f053712a3141c

SHA-1:
572a8a4c227d3077262b97e4f23835659d27b0be

SHA-256:
7e871c7e4ead981c0211ee04dba07dcc227367b5cf3067f22a3462c371405ca8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/26/2024 5:24:51 PM UTC  (today)

File size:
36 KB (36,864 bytes)

File type:
Dynamic link library (Win64 DLL)

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
9/12/2012 1:44:28 PM

Valid to:
6/12/2013 1:44:28 PM

Subject:
CN=Microsoft Windows, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Verification PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000001B1C4C5C7BD3FF112B00000000001B

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
768:X1LtHkMqr7bVgv1/C56F4HOZkjkDhll//fPQ1CHKmsjex:lLt1U7bVgA5g4H6kIFlN/fbsjI

Entry point:
30, 82, 30, ED, 06, 09, 2A, 86, 48, 86, F7, 0D, 01, 07, 02, A0, 82, 30, DE, 30, 82, 30, DA, 02, 01, 01, 31, 0B, 30, 09, 06, 05, 2B, 0E, 03, 02, 1A, 05, 00, 30, 82, 15, CE, 06, 09, 2B, 06, 01, 04, 01, 82, 37, 0A, 01, A0, 82, 15, BF, 30, 82, 15, BB, 30, 0C, 06, 0A, 2B, 06, 01, 04, 01, 82, 37, 0C, 01, 01, 04, 10, 01, C0, 0B, 0A, 11, 74, 5C, 49, A0, 48, 00, C6, E9, 0E, F4, 42, 17, 0D, 31, 32, 31, 31, 32, 31, 30, 33, 35, 31, 34, 35, 5A, 30, 0E, 06, 0A, 2B, 06, 01, 04, 01, 82, 37, 0C, 01, 02, 05, 00, 30, 82, 14...
 
[+]

Entropy:
7.7066  (probably packed)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.