» PKSHEX.DLL
Overview
Analysis
File Details
Behaviors (1)

PKSHEX.DLL

PKZIP Explorer

PKWARE, Inc.

File name:

PKSHEX.DLL

Publisher:

PKWARE, Inc. (signed and verified)

Product:

PKZIP® Explorer

Description:

PKSHEX Module

Version:

1.50.0071

MD5:

4944c9b70064657cf05cb7069367668f

SHA-1:

24e43abc09cc59a529fc93ee7a4d2e60fdffb8c5

SHA-256:

354ea079dc42924d6e3eeea240b8aa93bc3baba4db5a0aa72bca3d2a3b4d7c89

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 4:13:38 PM UTC (today)

File size:

173.6 KB (177,808 bytes)

Product version:

1.50.0071

Trademarks:

PKWARE, PKZIP, PKUNZIP, and the "Zipper Design" are either registered trademarks or trademarks of PKWARE, Inc. in the United States and/or other count

Original file name:

PKSHEX.DLL

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\pkware\pkzipe\pkshex.dll

Digital Signature

Signed by:

PKWARE, Inc.

Authority:

VeriSign, Inc.

Valid from:

4/19/2001 7:00:00 PM

Valid to:

4/21/2002 6:59:59 PM

Subject:

OU=Engineering, CN="PKWARE, Inc.", L=Brown Deer, S=Wisconsin, C=US, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU="www.verisign.com/repository/RPA Incorp. by Ref.,LIAB.LTD(c)98", OU=VeriSign Commercial Software Publishers CA, O="VeriSign, Inc.", L=Internet

Issuer:

OU=VeriSign Commercial Software Publishers CA, O="VeriSign, Inc.", L=Internet

Serial number:

7C655A3DC5E561A01CE6AE3EFCDD3C58

File PE Metadata

Compilation timestamp:

5/10/2001 4:21:05 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

3072:FU1/QjAPqqXwqRtavsbt3nnQdcv5QAKV0zGodgRNGm6TRNMqvU:FUR5wqHQ65QARzoEGL

Entry address:

0xF386

Entry point:

55, 8B, EC, 53, 8B, 5D, 08, 56, 8B, 75, 0C, 57, 8B, 7D, 10, 85, F6, 75, 09, 83, 3D, C8, BA, 01, 10, 00, EB, 26, 83, FE, 01, 74, 05, 83, FE, 02, 75, 22, A1, C8, D1, 01, 10, 85, C0, 74, 09, 57, 56, 53, FF, D0, 85, C0, 74, 0C, 57, 56, 53, E8, E7, FE, FF, FF, 85, C0, 75, 04, 33, C0, EB, 4E, 57, 56, 53, E8, 4F, D6, FF, FF, 83, FE, 01, 89, 45, 0C, 75, 0C, 85, C0, 75, 37, 57, 50, 53, E8, C3, FE, FF, FF, 85, F6, 74, 05, 83, FE, 03, 75, 26, 57, 56, 53, E8, B2, FE, FF, FF, 85, C0, 75, 03, 21, 45, 0C, 83, 7D, 0C, 00... 
[+]

Entropy:

6.0793

Developed / compiled with:

Microsoft Visual C++

Code size:

84 KB (86,016 bytes)

Approved Shell Extension

Name:

PKContextMenuHandler Class

CLSID:

{7414E744-CEFF-11D1-BBE3-0000E8C9F421}

Scan PKSHEX.DLL - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.