home

Microsoft.Expression.Interactions.dll

Microsoft.Expression.Interactions

Iminent

While the file properties state the file is developed by 'Microsoft Corporation', this is not the case and it is designed just to look like a legitimate Microsoft system file. The module Microsoft.Expression.Interactions.dll by Iminent has been detected as a potentially unwanted program by 3 anti-malware scanners.
Publisher:
Microsoft Corporation  (signed by Iminent)

Product:
Microsoft.Expression.Interactions

Version:
2.0.20525.0

MD5:
aa6eab14d1face77ae012114dda4b6d2

SHA-1:
5cde4026180d7b33c6419160a0c2083f5b9abb26

SHA-256:
e5040a7044b77c04b4a9ffadcd2dd28463d1461a2d86bc72bb19098338964cd6

Scanner detections:
3 / 68

Status:
Potentially unwanted

Analysis date:
4/25/2024 11:43:20 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Toolbar.Iminent (variant)
10.10254

Reason Heuristics
PUP.Sien.Iminent (M)
16.2.8.10

VIPRE Antivirus
Iminent
32214

File size:
95.1 KB (97,384 bytes)

Product version:
2.0.20525.0

Copyright:
Copyright (c) Microsoft Corporation. All rights reserved.

Original file name:
Microsoft.Expression.Interactions.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\Program Files\iminent\microsoft.expression.interactions.dll

Digital Signature
Signed by:
Iminent

Authority:
GlobalSign nv-sa

Valid from:
2/4/2014 11:29:10 AM

Valid to:
4/2/2015 5:55:45 AM

Subject:
CN=Iminent, O=Iminent, L=Paris, S=France, C=FR

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11216F31C65792A5D372269806F288027171

File PE Metadata
Compilation timestamp:
5/25/2010 9:12:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:Prf5GttgxHXEuRmG5rtkGY4CEmWAxXSSYhhS98ca2Wvsd65FJDlGWwkEymxVo:L5GttWHXEUx5r65LxXshk8JDIWPmxu

Entry address:
0x17A1E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.9788

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
87 KB (89,088 bytes)

Remove Microsoft.Expression.Interactions.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.