File Name | d3d9.dll |
File Type |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
Scanner Version | 1.0.176.174 |
Database Version | 2024-05-21 11:00:31 UTC |
No threats detected by our scanner
Hash Type | Value | Action |
---|---|---|
MD5 |
16d54b12a004a06d7baea52f5f53dabd
|
|
SHA1 |
ba53a7747c2011eb3b9ab9023d5d523f43266ff3
|
|
SHA256 |
794dfbd1b0b0c9f0081166c4a58b07051fe426bac67dd51562306fd1e586dc79
|
|
SHA512 |
0f552772fe1b222956de3cbaa6f5e2314cbef9a77228e7ebf72fb14ff457aa5cdac352ed44096f707a26d356590333b8bca92f53415a05a3f589df178fc2a923
|
|
ImpHash |
ded6d080f264e61761d5694135ae5ba9
|
Image Base | 0x10000000 |
Entry Point | 0x10002164 |
Compilation Time | 2009-08-03 05:37:19 |
Checksum | 0x00023f23 (Actual: 0x00023f23) |
OS Version | 4.0 |
PEiD Signatures |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
PDB Path | d:\projects\snap\untested\release game_folder\d3d9.pdb |
Digital Signature | The PE file does not contain a certificate table. |
Imports |
1 libraries
KERNEL32 |
Exports | 13 functions |
Resources | 1 Resources |
Sections | 5 Sections |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
51,130 bytes | 53,248 bytes | 6.59 (Compressed) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
FB8B18F06ECE0B3D8DA4B2730305756D |
.rdata |
0x0000e000 |
14,319 bytes | 16,384 bytes | 5.01 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
26E23EC3E5DFF3D40C3028EF3F4AC12B |
.data |
0x00012000 |
17,320 bytes | 12,288 bytes | 3.44 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
8CE9041E2A4B84673583C0234B1C0DA2 |
.rsrc |
0x00017000 |
176 bytes | 4,096 bytes | 3.06 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
51059071DBA5F892E7F8E36C7F7B8B1B |
.reloc |
0x00018000 |
14,504 bytes | 16,384 bytes | 2.99 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
4FD3C7492F4835B0F4A22BC9A3FA6230 |
1 section(s) with elevated entropy (≥6.5) - possible compression
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_MANIFEST | 1 | 86 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
The PE file does not contain a certificate table.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important