home

BYYBShell.dll

BYYBShell

GuangxiNanningshi Shengjuguangzaixian Info Tech Co.,LTD.

Publisher:
BYYB  (signed by GuangxiNanningshi Shengjuguangzaixian Info Tech Co.,LTD.)

Product:
BYYBShell

Description:
BYYBShell Extension

Version:
1.0.0

MD5:
d0d9bc47543af35d0e73938c47d5a5fc

SHA-1:
0c96b93072e4774e69bb0bc3cbfed0fbd033e718

SHA-256:
30665b32da6eacec40c72c4430cd63d7dae6c39da5b2c6463854825ff13104dd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 11:14:31 PM UTC  (a few moments ago)

File size:
1.2 MB (1,234,504 bytes)

Product version:
1.0.0

Copyright:
Copyright (c) 2010-2013 BYYB

Original file name:
BYYBShell.dll

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\Program Files\bianya2\201412152207\byybshell.dll

Digital Signature
Signed by:
GuangxiNanningshi Shengjuguangzaixian Info Tech Co.,LTD.

Authority:
Thawte, Inc.

Valid from:
4/14/2014 8:00:00 AM

Valid to:
4/15/2015 7:59:59 AM

Subject:
CN="GuangxiNanningshi Shengjuguangzaixian Info Tech Co.,LTD.", O="GuangxiNanningshi Shengjuguangzaixian Info Tech Co.,LTD.", L=Nanning, S=Guangxi, C=CN

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
2BAC93FD3FE5B005036AD0D4C873C6E5

File PE Metadata
Compilation timestamp:
12/11/2014 10:47:21 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:GHX0auBjOlX5YDyWo1pczBJub1ylZRPuJ:GHX0af06eP+

Entry address:
0x8BCC0

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, B3, DA, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, A7, FE, FF, FF, CC, CC, CC, B8, 05, 00, 00, 00, C3, CC, CC, 83, F9, 04, 77, 0F, 48, 63, C1, 48, 8D, 0D, C1, 5C, 06, 00, 48, 8B, 04, C1, C3, 33, C0, C3, CC, 83, F9, 04, 77, 13, 4C, 8D, 05, 24, BA, 08, 00, 48, 63, C9, 41, 8B, 04, 88, 41, 89, 14, 88, C3, 83, C8, FF, C3, 48, 8B, 05, D5...
 
[+]

Entropy:
5.2663

Code size:
808.5 KB (827,904 bytes)

Scan BYYBShell.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.