home

usp10.dll

Microsoft Uniscribe Unicode script processor

Microsoft Corporation

Publisher:
Microsoft Corporation

Product:
Microsoft(R) Uniscribe Unicode script processor

Description:
Uniscribe Unicode script processor

Version:
1.0473.4067.15 (nbeal.040302-1649)

MD5:
74a36a6f9827ce0a6f3f454174850f0e

SHA-1:
5d5bb846c14e807d0e1f2382934923362521c72f

SHA-256:
c3fbbb6a5df74e02f523b9c43b6dddbb2b42526644db23abf5ae942ef04134af

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/24/2024 8:43:27 AM UTC  (today)

Scan engine
Detection
Engine version

AegisLab AV Signature
W32.Expiro
2.1.4+

File size:
415 KB (424,960 bytes)

Product version:
1.0473.4067.15

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
Uniscribe

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\garenaelsword\gamedata\apps\elsph\data\usp10.dll

File PE Metadata
Compilation timestamp:
3/27/2004 7:18:15 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:K8oDP+XEIx0GtU6WoEA+Om3VpH9TgTS5+qvTjQlgtXHI81d/yd6w8e48S8ytG5d6:K8csEnzuQw5Z

Entry address:
0x27D10

Entry point:
55, 8B, EC, 8B, 45, 0C, 83, E8, 00, 74, 19, 48, 75, 34, 8B, 45, 08, 50, A3, 24, 52, 15, 65, FF, 15, 3C, 11, 10, 65, E8, 1F, FE, FF, FF, EB, 21, 83, 3D, 48, 52, 15, 65, 03, 74, 05, E8, 7B, FF, FF, FF, 83, 3D, 44, 52, 15, 65, 00, 75, 07, E8, A4, FF, FF, FF, EB, 03, 33, C0, 40, 5D, C2, 0C, 00, C7, 05, 44, 52, 15, 65, 01, 00, 00, 00, C3, 55, 8B, EC, 56, 8B, 75, 0C, 85, F6, 75, 07, B8, 57, 00, 07, 80, EB, 27, 83, 7D, 08, 00, 7C, F3, FF, 75, 08, 6A, 00, FF, 35, 28, 52, 15, 65, FF, 15, 38, 11, 10, 65, 89, 06, F7...
 
[+]

Entropy:
6.0704

Developed / compiled with:
Microsoft Visual C++

Code size:
289 KB (295,936 bytes)

The file usp10.dll has been seen being distributed by the following URL.

http://patch.elsword.levelup.com.br/.../usp10.dll

Scan usp10.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.