home

unmg.dll

PE Explorer

Heaventools Software

Publisher:
Heaventools Software  (signed and verified)

Product:
PE Explorer

Description:
PE Explorer Helper DLL

Version:
1.0.0.0

MD5:
66c2f1bb59108119cbe6658fad823528

SHA-1:
3df8f4441e445451a1b66e800be37bf295980d51

SHA-256:
b8098c30780f816ffb8e8e63ea54882abdbed3bb85d2daaa359769850d20e667

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 7:21:42 AM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V0820
7.2.92

File size:
70 KB (71,688 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2000-2007 Heaventools Software

Trademarks:
PE Explorer is a trademark of Heaventools Software

Original file name:
unmg.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\pe explorer\unmg.dll

Digital Signature
Signed by:
Heaventools Software

Authority:
The USERTRUST Network

Valid from:
10/24/2006 3:00:00 AM

Valid to:
10/25/2007 2:59:59 AM

Subject:
CN=Heaventools Software, O=Heaventools Software, STREET=101-1001 West Broadway Dept. 381, L=Vancouver, S=BC, PostalCode=V6H4E4, C=CA

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00E8A9A729F96534B2FD04A356DAA2DEC5

File PE Metadata
Compilation timestamp:
2/8/2007 2:59:59 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
1536:CFTqGGqZQywTyRpKOEnZhan5EY8+9G8GqqLpojf3+:CFTqHqDwG/x8dpoDu

Entry address:
0x1000

Entry point:
EB, 10, 66, 62, 3A, 43, 2B, 2B, 48, 4F, 4F, 4B, 90, E9, 70, C1, 00, 50, A1, F7, C0, 00, 50, C1, E0, 02, A3, FB, C0, 00, 50, 8B, 44, 24, 08, A3, 69, C1, 00, 50, FF, 14, 85, 59, C1, 00, 50, 83, 3D, 69, C1, 00, 50, 01, 75, 5E, 80, 3D, 03, C1, 00, 50, 00, 74, 24, E8, C2, AC, 00, 00, BA, 04, C1, 00, 50, 25, 00, 00, 00, 80, 74, 05, BA, 24, C1, 00, 50, 52, E8, 57, 80, 00, 00, 58, 33, C0, E9, 8F, 00, 00, 00, FE, 05, 03, C1, 00, 50, 83, 3D, 69, C1, 00, 50, 01, 75, 1A, E8, 1B, 90, 00, 00, 52, 8B, 54, 24, 08, E8, 61...
 
[+]

Entropy:
6.4192

Code size:
43.5 KB (44,544 bytes)

Scan unmg.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.