» PhotoProductCore.exe
Overview
Analysis
File Details
Programs (1)

PhotoProductCore.exe

Visan Industries

File name:

Publisher:

Visan / RocketLife (signed by Visan Industries)

Product:

PhotoProductCore.exe

Version:

1, 0, 0, 2731

MD5:

98c4c3316244d768dd9f5fae46ad8793

SHA-1:

9e258682273a0fd4ca232a45faea77085a9eaf4a

SHA-256:

5e517d02b9d1830ece6bfacbdb1a8b0e968b0d494115fc2f5d44ff7a2980ed3c

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 11:41:40 AM UTC (today)

File size:

313.5 KB (321,008 bytes)

Product version:

1, 0, 0, 2731

Original file name:

PhotoProductCore.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\ProgramData\hp photo creations meijer\photoproductcore.exe

Digital Signature

Signed by:

Visan Industries

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

9/13/2009 8:00:00 PM

Valid to:

9/13/2010 7:59:59 PM

Subject:

CN=Visan Industries, OU=SECURE APPLICATION DEVELOPMENT, O=Visan Industries, L=Folsom, S=California, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

2EF75B7A43D5EF9FFB3B64C9F8457DA1

File PE Metadata

Compilation timestamp:

2/5/2010 7:20:41 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.0

CTPH (ssdeep):

6144:hwHmji2rXVzAA0b48KseetQTBDDIWDbE/lS9lUVRrgGFG:hgmjiEXVzATb4vsRtQTVVHE/8lUVRrgi

Entry address:

0x1AD7F

Entry point:

6A, 60, 68, 68, C1, 42, 00, E8, 15, 0F, 00, 00, BF, 94, 00, 00, 00, 8B, C7, E8, 89, F0, FF, FF, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, 20, 62, 42, 00, 8B, 4E, 10, 89, 0D, 94, 10, 44, 00, 8B, 46, 04, A3, A0, 10, 44, 00, 8B, 56, 08, 89, 15, A4, 10, 44, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, 98, 10, 44, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, 98, 10, 44, 00, C1, E0, 08, 03, C2, A3, 9C, 10, 44, 00, 33, F6, 56, 8B, 3D, B8, 61, 42, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03... 
[+]

Entropy:

6.8993

Developed / compiled with:

Microsoft Visual C++ v7.0

Code size:

148 KB (151,552 bytes)

The file PhotoProductCore.exe has been discovered within the following program.

HP Photo Creations Meijer by Hewlett-Packard

Like to get creative with your photos? With HP Photo Creations, you can easily create beautiful keepsakes such as cards, calendars, photo books, and much more. Customize your projects with rich backgrounds, styled text, hundreds of graphics and thousands of border styles.

www.hp.com

3% remove it

Scan PhotoProductCore.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.