home

usermsgus.dll

GetData Pty Ltd

Publisher:
GetData Pty Ltd  (signed and verified)

Description:
Forensic Explorer

Version:
1.5.2.2658

MD5:
421569ce8ff4f562347ef1438ba52fb3

SHA-1:
3def85c8bfd0e92c11fd7ebda51b6aedbcf6b0a9

SHA-256:
b0635ac076949381e833c3611d0bbf8b38ef3e5550c9a92cf5519d8f263535a7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 11:05:41 AM UTC  (today)

File size:
8 MB (8,358,896 bytes)

Product version:
1.5

Copyright:
© 2014 GetData Pty Ltd

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\getdata\forensic explorer v1\usermsgus.dll

Digital Signature
Signed by:
GetData Pty Ltd

Authority:
GoDaddy.com, Inc.

Valid from:
4/3/2013 3:34:53 PM

Valid to:
4/3/2014 3:34:53 PM

Subject:
CN=GetData Pty Ltd, O=GetData Pty Ltd, L=KOGARAH, S=NSW, C=AU

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
277049179431A7

File PE Metadata
Compilation timestamp:
1/2/2014 5:52:02 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:s+dn4aBqtBWSiJitNQq8WifKq92Shi25SEcwt4QNtPEswHnuxdbdpAu52WGmYcDw:hdceEswHnuxJGmrQIGQmgE

Entry address:
0x76CA50

Entry point:
B8, FF, 00, 00, 00, 8B, 1D, 70, F3, C2, 00, F7, C3, 00, 01, 00, 00, 74, 0D, 57, 8B, FC, 8B, 47, 10, 50, 8B, 47, 0C, 50, EB, 02, 50, 50, E8, 59, FF, FF, FF, 83, C4, 08, 5F, 8B, 1D, 90, 12, C3, 00, F7, C3, 10, 00, 00, 00, 75, 08, A1, 5C, 13, C7, 00, 50, EB, 05, 33, C0, C2, 0C, 00, 33, C0, C3, CC, CC, CC, CC, CC, CC, CC, 56, 8B, F1, E8, B8, DB, 06, 00, 33, C0, 89, 86, B8, 02, 00, 00, 89, 86, BC, 02, 00, 00, 89, 86, C0, 02, 00, 00, 89, 86, C4, 02, 00, 00, 89, 86, C8, 02, 00, 00, 89, 86, E4, 02, 00, 00, 89, 86...
 
[+]

Entropy:
6.8623

Code size:
6.4 MB (6,703,104 bytes)

Scan usermsgus.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.