home

swscale-2.dll

Belledonne Communications

Publisher:
Belledonne Communications  (signed and verified)

MD5:
9d7b20264a0387099a109d3e48d0bb92

SHA-1:
807782dd12a9fcdbdfc65c3512a0c7d4bfab8f36

SHA-256:
34cfc3b60742c6ef354e772a4dc646ae6c32835aaf3e0e268ffbb5eace15d2fb

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/24/2024 10:17:07 PM UTC  (today)

Scan engine
Detection
Engine version

AegisLab AV Signature
Packer.W32.Katusha
2.1.4+

File size:
299.5 KB (306,672 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\sinosz\kontakt\swscale-2.dll

Digital Signature
Signed by:
Belledonne Communications

Authority:
GoDaddy.com, Inc.

Valid from:
6/13/2013 6:21:08 PM

Valid to:
6/13/2014 6:21:08 PM

Subject:
CN=Belledonne Communications, O=Belledonne Communications, L=Grenoble, S=Grenoble, C=FR

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
278E40EA1FAC93

File PE Metadata
Compilation timestamp:
1/10/2014 9:41:50 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.56

CTPH (ssdeep):
6144:92DXIMhblbTXLBPOPAo/rtr7EIlk2S+heclkl/+e92d08bPNbxyuF+n8rrdITl6L:927IitT7zoVEak2Xheh5+e92d0AFfWTK

Entry address:
0x1000

Entry point:
55, 89, E5, 83, EC, 28, 83, 7D, 0C, 01, 75, 77, C7, 04, 24, 80, 00, 00, 00, E8, A8, F5, 03, 00, A3, 00, 80, B4, 6A, A1, 00, 80, B4, 6A, 85, C0, 75, 15, E8, 9D, F5, 03, 00, C7, 00, 0C, 00, 00, 00, B8, 00, 00, 00, 00, E9, 98, 00, 00, 00, A1, 00, 80, B4, 6A, C7, 00, 00, 00, 00, 00, A1, 00, 80, B4, 6A, A3, 04, 80, B4, 6A, A1, 5C, 60, B4, 6A, 85, C0, 74, 20, 8B, 15, 5C, 60, B4, 6A, 8B, 45, 10, 89, 44, 24, 08, C7, 44, 24, 04, 02, 00, 00, 00, 8B, 45, 08, 89, 04, 24, FF, D2, 83, EC, 0C, E8, B0, F0, 03, 00, E8, 72...
 
[+]

Code size:
258 KB (264,192 bytes)

Scan swscale-2.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.