» JisuExt.dll
Overview
Analysis
File Details
Behaviors (1)

JisuExt.dll

极速拷贝Shell扩展

Beijing YiDaHongTian Technology Co., LTD

File name:

JisuExt.dll

Publisher:

Beijing YiDaHongTian Technology Co., LTD (signed and verified)

Product:

极速拷贝Shell扩展

Version:

1, 0, 0, 0

MD5:

ea9e3b281357ffd003a90dce5d2baf93

SHA-1:

16d219a6294e3ee165699b2a5c7a74f459fb0f16

SHA-256:

ac8c66a78d2bcc7dbe5d0f5ed37de20eae0f347e327f27fb0274839b72213d8b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

10/11/2025 9:21:23 AM UTC (today)

File size:

258.5 KB (264,752 bytes)

Product version:

1, 0, 0, 0

Original file name:

JisuExt.dll

File type:

Dynamic link library (Win32 DLL)

Language:

Chinese (Simplified, PRC)

Common path:

C:\Program Files\jisu\jisuext.dll

Digital Signature

Signed by:

Beijing YiDaHongTian Technology Co., LTD

Authority:

WoSign CA Limited

Valid from:

8/28/2015 4:23:55 PM

Valid to:

8/28/2016 4:23:55 PM

Subject:

CN="Beijing YiDaHongTian Technology Co., LTD", O="Beijing YiDaHongTian Technology Co., LTD", L=Beijing, S=Beijing, C=CN

Issuer:

CN=WoSign Class 3 Code Signing CA G2, O=WoSign CA Limited, C=CN

Serial number:

69690408C9A441B3F0296DA6697B3F65

Registration

CLSID:

{7FFC32EE-E81A-4E1C-8C98-E2E6F94F0A92}

COM registered:

Yes

File PE Metadata

Compilation timestamp:

7/31/2015 10:26:40 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

3072:aYRJIb9mBa9273vF2LB2lpINz9y5yNg5NMd6akmoTgcrUOFKN+7bz8wTURG:aOSRqv4V2lpI1o5yKaXITSWKNAbz8KUA

Entry address:

0x86D2

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 78, 38, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, FF, 35, 98, B4, 01, 10, FF, 15, E4, 31, 01, 10, 85, C0, 74, 02, FF, D0, 6A, 19, E8, B8, 2F, 00, 00, 6A, 01, 6A, 00, E8, 11, 39, 00, 00, 83, C4, 0C, E9, D6, 38, 00, 00, 6A, 10, 68, 78, 64, 01, 10, E8, 55, 26, 00, 00, 33, C0, 89, 45, E0, 89, 45, FC, 89, 45, E4, 8B, 45, E4, 3B, 45, 10, 7D, 13, 8B, 75, 08, 8B, CE, FF, 55, 14, 03, 75, 0C, 89, 75, 08, FF, 45, E4, EB, E5, C7... 
[+]

Entropy:

6.2839

Code size:

69 KB (70,656 bytes)

Approved Shell Extension

Name:

DcrSysFastUtil

CLSID:

{7FFC32EE-E81A-4E1C-8C98-E2E6F94F0A92}

Scan JisuExt.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.