Gridinsoft Logo
File Icon

The FMediaLibraryView.dll (FMediaLibraryView) File Analysis

Technical Analysis

File Name FMediaLibraryView.dll
File Type
Win32 DLL
Magic Bytes PE32+ executable (DLL) (GUI) x86-64, for MS Windows
SSDEEP Hash
98304:xyiV/BqPyD4uH312eT/QRT7BLkyRpOQsfIPfSpLYrT43BAHwATlUfITdMjwXmGCj:xvq012fRT7BKOqLe83mJUwBLpsyKT
Scanner Version 1.0.226.174
Database Version 2025-10-03 07:00:27 UTC

Suspicious File Detected

Detected by 34 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
47%
Detection Rate
7,911,424
File Size (bytes)
34/72
Engines Detected
2025-10-03
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
954a6976381f43887430788c2152a889
SHA1
aae7cbd2d51a23624af35b6717c06877d5512c6f
SHA256
b574eec4de5382f4a4ee8acf49cd0985ff6848a6826c42833819275b7ae7a4d9
SHA512
e85b0bd852f8fc17228c5486d687516006aa5b3c73d8e9c53dcd9a84a1a6e6ce065b4182ab1b51c2d1326088e685b449617cb06fbe4e590dc675884971b0d70c
ImpHash
e37ae89bbefa4ed85e5489fba178d2d8

Security Engines with Detections (34 of 72)

Bkav
W32.Common.932CE4D6 Malicious
Lionic
Trojan.Win32.Generic.4!c Malicious
Elastic
malicious (high confidence) Malicious
MicroWorld-eScan
Application.Generic.4176546 Malicious
CTX
dll.trojan.generic Malicious
CAT-QuickHeal
Trojan.Kepavll Malicious
Skyhigh
BehavesLike.Win64.Generic.wc Malicious
ALYac
Application.Generic.4176546 Malicious
Cylance
Unsafe Malicious
Sangfor
Trojan.Win32.Agent.Vwqq Malicious
CrowdStrike
win/malicious_confidence_100% (W) Malicious
Symantec
Trojan.Gen.MBT Malicious
ESET-NOD32
a variant of Win64/Packed.Enigma.DR Malicious
TrendMicro-HouseCall
TROJ_FRS.VSNTIL25 Malicious
Paloalto
generic.ml Malicious
BitDefender
Application.Generic.4176546 Malicious
Emsisoft
Application.Generic.4176546 (B) Malicious
VIPRE
Application.Generic.4176546 Malicious
TrendMicro
TROJ_FRS.VSNTIL25 Malicious
McAfeeD
ti!B574EEC4DE53 Malicious
Sophos
Generic Reputation PUA (PUA) Malicious
Ikarus
PUA.EnigmaProtector Malicious
GData
Application.Generic.4176546 Malicious
Google
Detected Malicious
Varist
W64/ABApplication.JSGZ-7567 Malicious
Arcabit
Application.Generic.D3FBAA2 Malicious
Microsoft
Trojan:Win32/Kepavll!rfn Malicious
Malwarebytes
Malware.Heuristic.2120 Malicious
Rising
[email protected] (TAGGANT:JnbrrFTh3HSy1AqEnm5aIA) Malicious
TrellixENS
Artemis!954A6976381F Malicious
MaxSecure
Trojan.Malware.324995110.susgen Malicious
Fortinet
Riskware/Application Malicious
DeepInstinct
MALICIOUS Malicious
alibabacloud
VirTool:Win/Wacatac.B9nj Malicious
38 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

Icon
Hash: a4c09c4859e5ebf0c25d5741e4dcf096
Fuzzy: f3a8cd694b22d7e9f267a395d00d9ba9
dHash: c69a727219ccb2b2
Image Base 0x180000000
Entry Point 0x181ca1940
Compilation Time 2025-08-19 02:16:21
Checksum 0x00b6f762 (Actual: 0x0078e954)
OS Version 6.0
PEiD Signatures PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 41 libraries
Exports 3193 functions
Resources 12 Resources
Sections 9 Sections

Version Information

CompanyName Wondershare
FileDescription FMediaLibraryView
FileVersion 14, 9, 3, 14445
InternalName FMediaLibraryView
LegalCopyright Copyright (c) 2020-2025 Wondershare. All rights reserved.
OriginalFilename FMediaLibraryView
ProductName FMediaLibraryView
ProductVersion 14.9.3.14445
Translation 0x0804 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
0x00001000 7,561,216 bytes 2,336,768 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE B7705B92198F6C498B4C214C5475DF05
0x00737000 3,493,888 bytes 792,576 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D99464046B02A55A5186374F53F96774
0x00a8c000 184,320 bytes 30,208 bytes 7.99 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 5275E93CD970277F56FD92DE35FA6423
0x00ab9000 442,368 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
0x00b25000 196,608 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
0x00b55000 90,112 bytes 8,192 bytes 7.87 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 83488AE2F726F4D7143054C715884DBE
.rsrc 0x00b6b000 196,608 bytes 196,608 bytes 5.95 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9C2CCD5CCE0852EA6BA85AD06AE58DFE
0x00b9b000 13,643,776 bytes 304,128 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 1D829761E1A8427E6FB1CDB9594ACD61
0x0189e000 4,222,976 bytes 4,220,416 bytes 7.88 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C3087A8D3C7F1247C09AD158475C0EFD
Entropy Analysis Alert

6 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

Total Resources: 12 (195,682 bytes)
Resource Type Count Total Size Percentage
RT_ICON 9 194,325 bytes
99.3%
RT_GROUP_ICON 1 132 bytes
0.1%
RT_VERSION 1 844 bytes
0.4%
RT_MANIFEST 1 381 bytes
0.2%

Certificate Chain Analysis

Certificate Information
Product FMediaLibraryView
Description FMediaLibraryView
File Version 14, 9, 3, 14445
Original Name FMediaLibraryView
Internal Name FMediaLibraryView
Copyright Copyright (c) 2020-2025 Wondershare. All rights reserved.
Certificate Chain Summary
tg167AA03 #1 Primary
Validity Period: 2021-06-10 07:53:18 → 2031-06-10 07:53:18
Signature Algorithm: sha256RSA
Serial Number: 4C 92 18 96 8B 96 0B C3 97 05 82 A5 FA 03 50 A6 4A 08 28 7D
Enigma Protector CA #2 Chain
Validity Period: 2019-02-05 16:34:15 → 2039-02-05 16:34:15
Signature Algorithm: sha256RSA
Serial Number: 2C ED 5C 2C 5D B4 B7 06 CF DF 0F 49 77 45 62 80 4F DC 00 C7
Sectigo Public Time Stamping CA R36 #3 Chain
Validity Period: 2021-03-22 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 7A 23 AE DA 53 69 96 0F 91 C8 3E 5C F4 C7 E3 3F
Sectigo Public Time Stamping Signer R36 #4 Chain
Validity Period: 2025-03-27 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number: A4 29 3B 6E 1E DD D7 A7 34 08 87 AD 7A 4E B7 24
Sectigo Public Time Stamping Root R46 #5 Chain
Validity Period: 2021-03-22 00:00:00 → 2038-01-18 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 36 C2 B0 BD 7C 1B 3A E7 A3 B3 DD 36 CB C9 75 68
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #6 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Wondershare Technology Group Co.,Ltd #7 Chain
Validity Period: 2025-04-03 00:00:00 → 2028-04-07 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 06 E1 58 70 D9 2A D8 35 24 5C 36 59 2C C3 2F F3

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
34 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware