home

Interop.HostShellExtensionLib.dll

Assembly imported from type library 'HostShellExtensionLib'.

Bromium, Inc.

The file Interop.HostShellExtensionLib.dll, re-signed by Bromium, Inc., is an Interop assembly that has been intergated by a 3rd-party into a .Net application.
Publisher:
Bromium, Inc.  (signed and verified)

Product:
Assembly imported from type library 'HostShellExtensionLib'.

Version:
1.0.0.0

MD5:
b321a5587e3d893588977a613110eaee

SHA-1:
7ac4d003d32686b776e5b8dd987799fc4f5d2506

SHA-256:
9275c4f5a92ccc1f721a549183240df60d1ed6eb3f3174d2c552a52592e7268d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 12:20:46 PM UTC  (today)

File size:
17.3 KB (17,736 bytes)

Product version:
1.0.0.0

Original file name:
Interop.HostShellExtensionLib.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\assembly\dl3\zx1mlvew.kye\t1dmntba.pph\59360102\00aaccb2_9b56ce01\interop.hostshellextensionlib.dll

Digital Signature
Signed by:
Bromium, Inc.

Authority:
GlobalSign nv-sa

Valid from:
7/10/2012 5:04:31 PM

Valid to:
7/11/2013 5:04:31 PM

Subject:
CN="Bromium, Inc.", OU=IT, O="Bromium, Inc.", L=Cupertino, S=CA, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112157BF250E65EF300A255D0DCF0E7FF6B4

File PE Metadata
Compilation timestamp:
5/21/2013 11:30:59 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:yKaBdFNhsd/wSc627umzzn2KpYfVYRhPLjYc9:FaJ45wg03z2aua

Entry address:
0x409E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.3110

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
8.5 KB (8,704 bytes)

Scan Interop.HostShellExtensionLib.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.