home

mrvutil.dll

Cellebrite Mobile Synchronization

Publisher:
Cellebrite Mobile Synchronization  (signed and verified)

MD5:
b90bae20da52bae5ebdf5115a87eda22

SHA-1:
926c5d11d39f4c1706887c89f07b077a9197cc6a

SHA-256:
755ac1bc3a2c56982e4e2c4e2fdd3f518577a8ba033490948dcf3dbd18cc5a9c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/3/2024 3:24:31 AM UTC  (today)

File size:
1.8 MB (1,849,432 bytes)

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\Program Files\cellebrite mobile synchronization\ufed physical analyzer\mrvutil.dll

Digital Signature
Signed by:
Cellebrite Mobile Synchronization

Authority:
VeriSign, Inc.

Valid from:
11/5/2014 6:00:00 PM

Valid to:
1/4/2018 5:59:59 PM

Subject:
CN=Cellebrite Mobile Synchronization, O=Cellebrite Mobile Synchronization, L=Petah Tiqwa, S=Hamerkaz, C=IL

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
38FD1FDD10C3E453E55970DD33B25A01

File PE Metadata
Compilation timestamp:
3/6/2017 7:30:36 AM

OS version:
6.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
12.0

Entry address:
0x4E1000

Entry point:
56, 50, 53, E8, 01, 00, 00, 00, CC, 58, 48, 89, C3, 48, FF, C0, 48, 2D, 00, C0, 1B, 00, 48, 2D, F0, FC, 0C, 10, 48, 05, E7, FC, 0C, 10, 80, 3B, CC, 75, 19, C6, 03, 00, BB, 00, 10, 00, 00, 68, F1, F9, 41, 08, 68, 27, 6D, 6A, 57, 53, 50, E8, 0C, 00, 00, 00, 48, 83, C0, 00, 48, 89, 44, 24, 10, 5B, 58, C3, 55, 48, 89, E5, 50, 53, 51, 56, 48, 8B, 75, 10, 8B, 4D, 18, C1, E9, 02, 8B, 45, 20, 8B, 5D, 28, 85, C9, 74, 0C, 31, 06, 01, 1E, 48, 83, C6, 04, FF, C9, EB, F0, 5E, 59, 5B, 58, C9, C2, 20, 00, 43, 14, 71, 98...
 
[+]

Entropy:
7.9571  (probably packed)

Code size:
30 KB (30,720 bytes)

Scan mrvutil.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.