» tmp0000017b60abe884c2838b26
Overview
Analysis
File Details

tmp0000017b60abe884c2838b26

DTS Post Processing APO

Realtek Semiconductor Corp

File name:

Publisher:

DTS (signed by Realtek Semiconductor Corp)

Product:

DTS Post Processing APO

Description:

DTS GFX APO

Version:

100op

MD5:

f013a63a73de664b908c87187cd0d2e9

SHA-1:

0951e8c76a5cf4f6736933855c5dab5f7909ec48

SHA-256:

23583fbf915f90ee306895d95883ce90f18dde433a1417b55ccd003680b43477

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/18/2024 11:18:29 AM UTC (today)

File size:

512 KB (524,288 bytes)

Product version:

100op

Original file name:

DTSGFXAPO.dll

Language:

English (United States)

Common path:

C:\windows\temp\tmp0000017b60abe884c2838b26

Digital Signature

Signed by:

Realtek Semiconductor Corp

Authority:

Realtek Semiconductor Corp.

Valid from:

6/7/2010 9:05:09 AM

Valid to:

6/7/2011 9:15:09 AM

Subject:

CN=Realtek Semiconductor Corp

Issuer:

CN=Realtek Semiconductor Corp.

Serial number:

610205F1000000000003

File PE Metadata

Compilation timestamp:

7/1/2010 7:41:01 AM

OS version:

6.0

OS bitness:

Win64

Subsystem:

Windows Console

Linker version:

8.0

CTPH (ssdeep):

12288:Rblmf08E0IdLwEiaXyLLCND4y66FFkQEiaXfLLCND6066FzwTEiaX8LLCND0Q66c:TJ8E0UiaXyLLCND4y66F4iaXfLLCND6H

Entry address:

0x112E8

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 83, FA, 01, 49, 8B, F8, 8B, DA, 48, 8B, F1, 75, 05, E8, BB, 07, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, C3, FA, FF, FF, CC, CC, CC, CC, CC, CC, CC, FF, 25, A6, FF, FE, FF, CC, CC, CC, CC, CC, CC, FF, 25, 6A, FF, FE, FF, CC, CC, CC, CC, CC, CC, FF, 25, 46, 00, FF, FF, CC, CC, CC, CC, CC, CC, FF, 25, 62, FF, FE, FF, CC, CC, CC, CC, CC, CC, FF, 25, 5E, FF, FE, FF, CC, CC, CC, CC, CC, CC... 
[+]

Entropy:

6.4350

Code size:

91.5 KB (93,696 bytes)

Scan tmp0000017b60abe884c2838b26 - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.