home

pdfimpressshellextension.dll

BinaryNow, Inc.

It is registered as a context menu handler (displays a menu when right-clicked in Explorer) named “PDFImpressShellExtension”. This is installed with Everything PDF.
Publisher:
BinaryNow, Inc.  (signed and verified)

MD5:
f1c1ea1c8cb91e916a2c24c6bc704a66

SHA-1:
e51461b2f2a8b044e15c1c293d9204fe0be9cbf5

SHA-256:
30546d42d3062d96433234ef84716eebda5c3b591eb010ad3d1cefbf3506be01

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 9:00:01 PM UTC  (today)

File size:
34.9 KB (35,720 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\common files\binarynow\pdfimpress 2014\pdfimpressshellextension.dll

Digital Signature
Signed by:
BinaryNow, Inc.

Authority:
VeriSign, Inc.

Valid from:
7/24/2013 3:00:00 AM

Valid to:
9/23/2014 2:59:59 AM

Subject:
CN="BinaryNow, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="BinaryNow, Inc.", L=Jacksonville Beach, S=Florida, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
63FC079EFCFBFB176AA2D755988A3518

File PE Metadata
Compilation timestamp:
4/24/2014 3:15:30 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
384:s2ng2/4HKpUCq6l1IHC94NnI5wlDwhn3AgLt04g7i17cm796AHAVOflHPVmY8PHm:sK6CNlmo5wtwigLwjhNOf5dmY8PHX1M

Entry address:
0x44A2

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 92, 04, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, CC, FE, FF, FF, 59, 5D, C2, 0C, 00, CC, FF, 25, E0, 50, 00, 10, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, C8, 72, 00, 10, 89, 0D, C4, 72, 00, 10, 89, 15, C0, 72, 00, 10, 89, 1D, BC, 72, 00, 10, 89, 35, B8, 72, 00, 10, 89, 3D, B4, 72, 00, 10, 66, 8C, 15, E0, 72, 00, 10, 66, 8C, 0D, D4, 72, 00, 10, 66, 8C, 1D, B0, 72, 00, 10, 66, 8C, 05, AC, 72, 00, 10, 66, 8C, 25, A8, 72, 00, 10, 66, 8C, 2D, A4, 72...
 
[+]

Code size:
16 KB (16,384 bytes)

Context Menu Handler
Display name:
PDFImpressShellExtension

CLSID:
{F82E686B-DF11-4E40-B8B1-3D5FCD5F5AD8}

CLSID name:
PDFImpressShellExtension ContextMenu Shell Extension


The file pdfimpressshellextension.dll has been discovered within the following program.

Everything PDF  by BinaryNow, Inc.
About 9% of users remove it
 
Powered by Should I Remove It?

Scan pdfimpressshellextension.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.