home

Microsoft.Windows.Shell.dll

Microsoft.Windows.Shell

Oleksandr Reminnyi

Publisher:
Microsoft  (signed by Oleksandr Reminnyi)

Product:
Microsoft.Windows.Shell

Version:
3.0.1.0

MD5:
75e4232fc7a31083f0d99e4749ac0685

SHA-1:
3981e2353c73c1adffe1df7b1a197360465efd3e

SHA-256:
905ec3726f451f947955472f3514c58855180fa07d2150a154e37850816e40a6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 6:14:59 AM UTC  (today)

File size:
157.7 KB (161,480 bytes)

Product version:
3.0.1.0

Copyright:
Copyright © Microsoft 2010

Original file name:
Microsoft.Windows.Shell.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\Program Files\stepshot_v3\microsoft.windows.shell.dll

Digital Signature
Signed by:
Oleksandr Reminnyi

Authority:
COMODO CA Limited

Valid from:
9/14/2011 8:00:00 PM

Valid to:
9/14/2014 7:59:59 PM

Subject:
CN=Oleksandr Reminnyi, O=Oleksandr Reminnyi, STREET="Kvyateka 1a, flat 55", L=Vinnitsa, S=Vinnitsa region, PostalCode=21029, C=UA

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
7405A556B803F7835D04C8D5B646423E

File PE Metadata
Compilation timestamp:
5/18/2012 5:56:02 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:QvGgkwsEsvwO7ohcBl2cyZeEi3f5z93sUaOeA+Ir8qsmsXcrgsq:x6s7wOUetX5zFs3AMqwmLq

Entry address:
0x26A2E

Entry point:
FF, 25, 00, 20, 00, 10, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.2966

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
147 KB (150,528 bytes)

Scan Microsoft.Windows.Shell.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.