» PhotoProductCore.exe
Overview
Analysis
File Details
Programs (1)

PhotoProductCore.exe

Visan Industries

File name:

Publisher:

Visan / RocketLife (signed by Visan Industries)

Product:

PhotoProductCore.exe

Version:

1, 0, 0, 2731

MD5:

63b384c60d515258fcdf0d618d5a9ef3

SHA-1:

469e10ac5de5372132a199045cf01d468686c0ca

SHA-256:

efc89d15ab3e9443e69a5bd98a0bbb6b1fc028b87b09f6af37f2edeac31f29fd

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 6:59:20 AM UTC (today)

File size:

313.5 KB (321,008 bytes)

Product version:

1, 0, 0, 2731

Original file name:

PhotoProductCore.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\ProgramData\hp photo creations\photoproductcore.exe

Digital Signature

Signed by:

Visan Industries

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

9/13/2009 8:00:00 PM

Valid to:

9/13/2010 7:59:59 PM

Subject:

CN=Visan Industries, OU=SECURE APPLICATION DEVELOPMENT, O=Visan Industries, L=Folsom, S=California, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

2EF75B7A43D5EF9FFB3B64C9F8457DA1

File PE Metadata

Compilation timestamp:

2/5/2010 7:17:18 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.0

CTPH (ssdeep):

6144:cw0Gjiirwl9RAPkywcw8edDQTBjxIWFeE/lS9lUVRrgGFG:cLGjiYwl9RAsywh8GDQTVnYE/8lUVRr/

Entry address:

0x1AD7F

Entry point:

6A, 60, 68, 58, C1, 42, 00, E8, 15, 0F, 00, 00, BF, 94, 00, 00, 00, 8B, C7, E8, 89, F0, FF, FF, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, 20, 62, 42, 00, 8B, 4E, 10, 89, 0D, 94, 10, 44, 00, 8B, 46, 04, A3, A0, 10, 44, 00, 8B, 56, 08, 89, 15, A4, 10, 44, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, 98, 10, 44, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, 98, 10, 44, 00, C1, E0, 08, 03, C2, A3, 9C, 10, 44, 00, 33, F6, 56, 8B, 3D, B8, 61, 42, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03... 
[+]

Entropy:

6.8986

Developed / compiled with:

Microsoft Visual C++ v7.0

Code size:

148 KB (151,552 bytes)

The file PhotoProductCore.exe has been discovered within the following program.

HP Photo Creations by Hewlett-Packard

Like to get creative with your photos? With HP Photo Creations, you can easily create beautiful keepsakes such as cards, calendars, photo books, and much more. Customize your projects with rich backgrounds, styled text, hundreds of graphics and thousands of border styles.

www.hp.com

23% remove it

Scan PhotoProductCore.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.