home

phonedll1.dll

5d6f7a8d-654a-47f6-ac61-9598050cd95d

Publisher:
5d6f7a8d-654a-47f6-ac61-9598050cd95d  (signed and verified)

MD5:
9179df1ccbc4f1796c56a467433b6297

SHA-1:
4c255bbc97d5e7ee33c58d8cd82da37daf4862af

SHA-256:
6ed59d5f7c946b62aa8f4d6394d4b510a33fbdc3e47a5b126ab2e93b6ed7ad1f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 1:17:22 AM UTC  (today)

File size:
880.6 KB (901,736 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\msil\phonedll1.dll

Digital Signature
Signed by:
5d6f7a8d-654a-47f6-ac61-9598050cd95d

Authority:
Microsoft Corporation

Valid from:
7/9/2013 1:15:06 AM

Valid to:
7/12/2013 1:25:06 AM

Subject:
CN=5d6f7a8d-654a-47f6-ac61-9598050cd95d

Issuer:
CN=Microsoft Marketplace CA 014, OU=AOC, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
3EA0EC96000000027536

File PE Metadata
Compilation timestamp:
7/1/2013 9:34:27 AM

OS version:
6.2

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

CTPH (ssdeep):
6144:W4upH/frlhRwVPEyP4W3KSM3sUvBySS9GZQv4FuwCFiUQmQI5hSeXH1Hd2XnZCdn:riHJhRwXqvUt4Wv4IwVQ1qZQmyqq42

Entry address:
0x6AB25

Entry point:
E9, 78, 48, 0D, F2, 10, 0B, 0C, 46, 01, 2C, 15, 46, 06, 46, 01, D1, 00, F0, ED, F8, 2A, 46, 21, 46, 30, 46, FF, F7, 76, FF, BD, E8, 78, 88, 4D, F2, E8, 0C, C1, F2, 06, 0C, DC, F8, 00, F0, 4D, F2, EC, 0C, C1, F2, 06, 0C, DC, F8, 00, F0, 4D, F2, F0, 0C, C1, F2, 06, 0C, DC, F8, 00, F0, 4D, F2, F8, 0C, C1, F2, 06, 0C, DC, F8, 00, F0, 4D, F2, FC, 0C, C1, F2, 06, 0C, DC, F8, 00, F0, 4D, F2, 00, 1C, C1, F2, 06, 0C, DC, F8, 00, F0, 4D, F2, 04, 1C, C1, F2, 06, 0C, DC, F8, 00, F0, 4D, F2, 08, 1C, C1, F2, 06, 0C, DC...
 
[+]

Packer / compiler:
Xtreme-Protector v1.05

Code size:
428.5 KB (438,784 bytes)

Scan phonedll1.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.