home

HostShellExtension.dll

vSentry

Bromium, Inc.

Publisher:
Bromium  (signed by Bromium, Inc.)

Product:
vSentry

Description:
Bromium vSentry Explorer Extension

Version:
3.2.0.8644

MD5:
f739416a7c360f1f17a88307fda044ce

SHA-1:
4c36cbc1fff12e650911c2b72f14d85e96c68ba8

SHA-256:
8421a0f566b780bab31e65706fd643aad3565049dc2addc7b46a9e245228e874

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/29/2024 6:00:25 PM UTC  (today)

File size:
3.7 MB (3,868,016 bytes)

Product version:
3.2.0.8644

Copyright:
Copyright (c) Bromium 2012-2015. All Rights Reserved.

Original file name:
HostShellExtension.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Program Files\bromium\vsentry\3.2.0.8644\servers\hostshellextension.dll

Digital Signature
Signed by:
Bromium, Inc.

Authority:
GlobalSign nv-sa

Valid from:
6/17/2015 8:28:20 AM

Valid to:
8/19/2016 1:52:47 PM

Subject:
CN="Bromium, Inc.", O="Bromium, Inc.", L=Cupertino, S=CA, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121A219582CD3AF9F31142AFB4A28673D15

Registration
CLSIDs:
{029379E7-78A4-4B98-9FDC-216E802AAE3F}, {5F4F5529-DD35-4B9F-812F-A5B7B5E57039}, {6CDCC3E8-D8FF-46EF-B8BE-63A75F265AE5}, {833378FE-1986-46BA-9B4E-F8F6DFA8B9AB}, {A814ECA0-0663-454B-801F-2F53440662E6}, {DE118E34-A214-48B2-A03B-503B6C45643F}

ProgIDs:
Bromium.BrElevator_3_2_0_8644.1, Bromium.ShellOperation_3_2_0_8644.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
6/15/2016 11:26:24 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
10.0

Entry address:
0x1EA24C

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 97, CF, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, A7, FE, FF, FF, CC, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 48, 8B, DA, 48, 8B, F9, 48, 85, C9, 75, 0A, 48, 8B, CA, E8, E2, DF, FF, FF, EB, 6A, 48, 85, D2, 75, 07, E8, 8E, E0, FF, FF, EB, 5C, 48, 83, FA, E0, 77, 43, 48, 8B, 0D, 2F, D3, 13, 00, B8, 01, 00...
 
[+]

Entropy:
6.0732

Code size:
2.1 MB (2,238,976 bytes)

Scan HostShellExtension.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.