home

Microsoft.Windows.Shell.dll

Microsoft .NET Framework

Microsoft Corporation

This is installed with multiple programs including Microsoft Mathematics and Microsoft Mathematics (64-bit). The file has been seen being downloaded from doc-00-5s-docs.googleusercontent.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® .NET Framework

Description:
Microsoft.Windows.Shell.dll

Version:
3.5.41019.1

MD5:
8c57270aea8639e85b31749b0cc0a732

SHA-1:
4bae9e7c1b663de18769c8750fa3693e6ff607c9

SHA-256:
b6e0b3380cd45473f36d3fd822b85591bc2f7d0a1475355dc35e978f412522c4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/26/2024 12:12:16 PM UTC  (today)

File size:
163.9 KB (167,808 bytes)

Product version:
3.5.41019.1

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
Microsoft.Windows.Shell.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\microsoft.windows.shell.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
7/20/2010 12:53:10 AM

Valid to:
10/20/2011 12:53:10 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6108775F00000000004A

File PE Metadata
Compilation timestamp:
10/19/2010 8:17:23 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:J/c9acTJ2IYK8/UVry6m6ihGAoeA+Ir8qsmkmsm:vcTSKVtcGuAMqoms

Entry address:
0x2883E

Entry point:
FF, 25, 00, 20, 00, 10, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
154.5 KB (158,208 bytes)

The file Microsoft.Windows.Shell.dll has been discovered within the following programs.

Microsoft Mathematics  by Microsoft Corporation
With the Microsoft Mathematics Add-in for Word and OneNote, you can perform mathematical calculations and plot graphs in your Word documents and OneNote notebooks.
6% remove it
Microsoft Mathematics (64-bit)  by Microsoft Corporation
Publisher's description - “Microsoft Mathematics Add-in for Word and OneNote makes it easy to plot graphs in 2D and 3D, calculate numerical results, solve equations or inequalities, and simplify algebraic expressions in your Word documents and OneNote notebooks.”
5% remove it
 
Powered by Should I Remove It?

The file Microsoft.Windows.Shell.dll has been seen being distributed by the following 2 URLs.

https://doc-00-5s-docs.googleusercontent.com/docs/securesc/fv2mooik2h8t6cf0akhj53oqmm1r9cip/ip9bbfs5nfb9boc323ukiv1hkaa9ao3h/1465365600000/01436485459148413914/.../0B3M7Sgvu5GIbTl9fZ0xSaWRPWVE?e=download

ftp://filecenter.inoclad.com/Sales Analyser Files/Updates/calcu/calcu/bin/.../Microsoft.Windows.Shell.dll

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.