» nokia.graphics.imaging.dll
Overview
Analysis
File Details

nokia.graphics.imaging.dll

437f70cf-db3b-4e42-aa60-7605b2a29af4

File name:

Publisher:

437f70cf-db3b-4e42-aa60-7605b2a29af4 (signed and verified)

MD5:

72625dc87a9e0fefdf6a8c56a60066ae

SHA-1:

9244f1f617e5a6fe99f52960c759bc19c86fa2c7

SHA-256:

b34c23147ee96087c02e67b4d58bec43bd321dd9f9617ccab1b3e4f49570f31c

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/2/2024 4:49:16 PM UTC (today)

File size:

2.5 MB (2,628,168 bytes)

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\msil\nokia.graphics.imaging.dll

Digital Signature

Signed by:

437f70cf-db3b-4e42-aa60-7605b2a29af4

Authority:

Microsoft Corporation

Valid from:

4/6/2015 4:13:14 AM

Valid to:

4/9/2015 4:13:14 AM

Subject:

CN=437f70cf-db3b-4e42-aa60-7605b2a29af4

Issuer:

CN=Microsoft Marketplace CA G 006, OU=AOC, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:

330003AB135062FE6032B9380100000003AB13

File PE Metadata

Compilation timestamp:

6/10/2014 2:50:23 AM

OS version:

6.2

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

11.0

CTPH (ssdeep):

24576:AJ4YObNCdOXfZhMOMgJBHuOZ9P3mlx0JpMgjLeny30z+TNB:pIkXfZ7uY/m30JpMgj+yOANB

Entry address:

0x147A21

Entry point:

E9, 78, 48, 0D, F2, 10, 0B, 0C, 46, 01, 2C, 15, 46, 06, 46, 01, D1, 00, F0, 2D, FC, 2A, 46, 21, 46, 30, 46, FF, F7, 76, FF, BD, E8, 78, 88, 81, B0, 48, F2, 2C, 6C, C1, F2, 20, 0C, DC, F8, 00, C0, AD, EB, 0C, 0C, CD, F8, 00, C0, 70, 47, 48, F2, 2C, 6C, C1, F2, 20, 0C, 00, 9B, DC, F8, 00, C0, AD, EB, 03, 03, 63, 45, 01, D1, 01, B0, 70, 47, 18, 46, 10, B5, 6C, 46, EC, 46, 2C, F0, 07, 0C, E5, 46, FF, F7, 96, FC, A5, 46, BD, E8, 10, 40, 70, 47, 13, 68, 01, 46, 33, F0, 03, 02, 50, 58, 13, F0, 01, 0F, 01, D0, 13... 
[+]

Packer / compiler:

Xtreme-Protector v1.05

Code size:

1.3 MB (1,343,488 bytes)

Scan nokia.graphics.imaging.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.