» MMShellHook.dll
Overview
Analysis
File Details
Programs (1)

MMShellHook.dll

MMShellHook

Roni Music AB

File name:

MMShellHook.dll

Publisher:

Gunnar Roth (signed by Roni Music AB)

Product:

MMShellHook

Description:

MMShellHook DLL for Win32

Version:

1, 0, 0, 0

MD5:

683685421b50d2e1dbc463ca7fd95ef4

SHA-1:

84c5a3ea44404164cf7f3f0bf1094b47ea00c6bb

SHA-256:

9f7b277f91d7d7aad83efbdb92de5fbac96ad8cf4046a54dfd6d47e4ec3b1784

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 9:43:43 AM UTC (today)

File size:

40.1 KB (41,040 bytes)

Product version:

1, 0, 0, 0

Original file name:

MMShellHook.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United Kingdom)

Common path:

C:\Program Files\roni music\amazing slow downer\mmshellhook.dll

Digital Signature

Signed by:

Roni Music AB

Authority:

GlobalSign nv-sa

Valid from:

11/1/2012 4:02:18 PM

Valid to:

11/2/2015 4:02:18 PM

Subject:

CN=Roni Music AB, O=Roni Music AB, L=Limhamn, S=Skane, C=SE

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

112149E1677E1B01D4A564D7C4BFD57C0B3C

File PE Metadata

Compilation timestamp:

10/11/2012 8:10:13 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

768:e+e8S7HJI0K26te55hf+bmnTED7f7vyt8pLg4+4+wqlO:eZX6teFfjBt8hD+CqlO

Entry address:

0x13CF

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 1A, 13, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 6A, 00, FF, 15, 24, 60, 00, 10, C3, FF, 15, 28, 60, 00, 10, C2, 04, 00, 8B, FF, 56, FF, 35, 04, 90, 00, 10, FF, 15, 2C, 60, 00, 10, 8B, F0, 85, F6, 75, 1B, FF, 35, 3C, 9B, 00, 10, FF, 15, 1C, 60, 00, 10, 8B, F0, 56, FF, 35, 04, 90, 00, 10, FF, 15, 30, 60, 00, 10, 8B, C6, 5E, C3, A1, 00, 90, 00, 10, 83, F8, FF, 74, 16, 50, FF, 35, 44, 9B, 00, 10, FF, 15, 1C, 60, 00, 10... 
[+]

Entropy:

6.1569

Code size:

18 KB (18,432 bytes)

The file MMShellHook.dll has been discovered within the following program.

Amazing Slow Downer (remove only)

About 9% of users remove it

Scan MMShellHook.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.