» microsoft.windows.simulator.utilitieselevated.dll
Overview
Analysis
File Details

microsoft.windows.simulator.utilitieselevated.dll

Microsoft Visual Studio 14 CTP

VS Bld Lab

File name:

Publisher:

Microsoft Corporation (signed by VS Bld Lab)

Product:

Microsoft® Visual Studio® 14 CTP

Description:

Microsoft Windows Simulator Utilities Elevated

Version:

14.0.22108.0 built by: BLOOMERMAIN

MD5:

155536bd1ddfbd6df8afcd2a4874aca7

SHA-1:

54cbc098b89eb438dd2c2d071a160b7594f1f540

SHA-256:

2e116fbbaeda63b889c499ae85fa7809a5838b3a04d3e694dcef8d636dda47d5

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/5/2024 3:00:30 AM UTC (today)

File size:

153.5 KB (157,144 bytes)

Product version:

14.0.22108.0

Original file name:

Microsoft.Windows.Simulator.Utilities.Elevated.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\common files\microsoft shared\windows simulator\14.0\microsoft.windows.simulator.utilitieselevated.dll

Digital Signature

Signed by:

VS Bld Lab

Authority:

MSIT Test CodeSign CA 2

Valid from:

5/29/2014 12:31:43 PM

Valid to:

5/29/2015 12:31:43 PM

Subject:

CN=VS Bld Lab

Issuer:

CN=MSIT Test CodeSign CA 2, DC=redmond, DC=corp, DC=microsoft, DC=com

Serial number:

77005295DF3E4B5ED6C1C0DF560003005295DF

Registration

CLSID:

{4D603A77-401C-4BB5-AF12-545D026688F2}

COM registered:

Yes

File PE Metadata

Compilation timestamp:

9/8/2014 2:38:03 AM

OS version:

6.0

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

12.0

CTPH (ssdeep):

3072:ubCtLLtD4OkTbSa4uZnOlR5u8kwH0CXz7UGWGP+5BH6UIQVNyc:uTTb2uC/jkwH1zZCJ

Entry address:

0x5BC8

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 7F, 1E, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 03, 00, 00, 00, CC, CC, CC, 48, 8B, C4, 48, 89, 58, 20, 4C, 89, 40, 18, 89, 50, 10, 48, 89, 48, 08, 56, 57, 41, 56, 48, 83, EC, 50, 49, 8B, F0, 8B, DA, 4C, 8B, F1, BA, 01, 00, 00, 00, 89, 50, B8, 85, DB, 75, 0F, 39, 1D, 04, CE, 01, 00, 75, 07, 33, C0, E9, D2, 00, 00, 00, 8D, 43, FF... 
[+]

Entropy:

6.0049

Code size:

80 KB (81,920 bytes)

Scan microsoft.windows.simulator.utilitieselevated.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.