home

htrshell.DLL

htrshell Module

Consona Corporation

Publisher:
SupportSoft, Inc.  (signed by Consona Corporation)

Product:
htrshell Module

Version:
7.1.1426.0

MD5:
49d0d27cf7b35c259d622250224b3e9a

SHA-1:
d01170c7d76e77b49a6058c7a0b807f81b69da9c

SHA-256:
7823c5f30eed21b4f797d0d6b40c822aff788308ad0e452ef45d48410a97357e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 11:52:25 AM UTC  (today)

File size:
272 KB (278,544 bytes)

Product version:
7.1.1426.0

Copyright:
Copyright 1997-2012 SupportSoft

Original file name:
htrshell.DLL

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\expertouchent\bin\htrshell.dll

Digital Signature
Signed by:
Consona Corporation

Authority:
DigiCert Inc

Valid from:
3/7/2012 5:30:00 AM

Valid to:
5/11/2015 5:30:00 PM

Subject:
CN=Consona Corporation, O=Consona Corporation, L=Indianapolis, S=Indiana, C=US

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0BC067A0CDC7DC45C421FE8B52761584

Registration
CLSID:
{01116800-3E00-11D2-8470-0060089874ED}

ProgID:
SdcHeal.RemoteShell.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
10/9/2012 11:40:31 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:QFZbxU8igHn4AddLCtnJUIjk96/bs38zc4pXQi6o/nJf8kcf6MqqDLy/vMpMTO:Q4JArLgnJUIj3d58kcfpqqDLuEpoO

Entry address:
0x9945

Entry point:
55, 8B, EC, 53, 8B, 5D, 08, 56, 8B, 75, 0C, 57, 8B, 7D, 10, 85, F6, 75, 09, 83, 3D, A8, 64, 5A, 65, 00, EB, 26, 83, FE, 01, 74, 05, 83, FE, 02, 75, 22, A1, A0, 8C, 5A, 65, 85, C0, 74, 09, 57, 56, 53, FF, D0, 85, C0, 74, 0C, 57, 56, 53, E8, E7, FE, FF, FF, 85, C0, 75, 04, 33, C0, EB, 4E, 57, 56, 53, E8, 97, 76, FF, FF, 83, FE, 01, 89, 45, 0C, 75, 0C, 85, C0, 75, 37, 57, 50, 53, E8, C3, FE, FF, FF, 85, F6, 74, 05, 83, FE, 03, 75, 26, 57, 56, 53, E8, B2, FE, FF, FF, 85, C0, 75, 03, 21, 45, 0C, 83, 7D, 0C, 00...
 
[+]

Entropy:
6.3343

Developed / compiled with:
Microsoft Visual C++

Code size:
152 KB (155,648 bytes)

Scan htrshell.DLL - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.