home

CustomActions.dll

CustomActions

Matthias Pierschel

Publisher:
Matthias Pierschel  (signed and verified)

Product:
CustomActions

Version:
1.0.0.0

MD5:
06de6b9fd50580fac3ff3f9e6ccc4bce

SHA-1:
5db0ef0bfd2b8450f709ff9ee30e2287120e1c9a

SHA-256:
5d9a2287689584db6ffff76611690b0296693670ae69a78d662265016f36baf2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/14/2025 12:17:19 AM UTC  (today)

File size:
17.1 KB (17,496 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © Matthias Pierschel 2013

Original file name:
CustomActions.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\ProgramData\{6a3ecc0f-72cb-48aa-b0ad-2f6162e53e61}\customactions.dll

Digital Signature
Signed by:
Matthias Pierschel

Authority:
StartCom Ltd.

Valid from:
6/17/2013 1:59:53 PM

Valid to:
6/17/2015 11:10:34 PM

Subject:
E=startssl@pierschel.com, CN=Matthias Pierschel, L=Dresden, S=Sachsen, C=DE, Description=IzqfxieJWX3b62Fx

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0A25

File PE Metadata
Compilation timestamp:
6/12/2014 4:03:22 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
192:syoX76DdriQCGZzTF9W8yRlMyLhnYe+PjPdtAFyhrSJVvwpy9MsP7wFIrN:sclpxx9WhnYPLdt/rAVVP7V

Entry address:
0x41DE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 10, 00, 00, 00, 18, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 01, 00, 00, 00, 30, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 48, 00, 00, 00, 58, 60, 00, 00, F8, 02, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, F8, 02, 34, 00, 00, 00...
 
[+]

Entropy:
6.0839

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
8.5 KB (8,704 bytes)

Scan CustomActions.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.