home

shs.exe

Rogers Self Help Software

Rogers Cable Communications Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Rogers SHS’.
Publisher:
Rogers Cable Communications Inc.  (signed and verified)

Product:
Rogers Self Help Software

Version:
4.0.5.3

MD5:
cf9e5f8d37fe3f5fe6ae1239a292bde8

SHA-1:
b5ce12a25fb6e608e621a4d59be1ec8cb650da68

SHA-256:
fd3ceef7d128daf1e12d2282c9acc90747ba01c1b50af6c65fced0eed6a5d3a3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/3/2024 11:44:56 PM UTC  (a few moments ago)

File size:
2.6 MB (2,733,416 bytes)

Product version:
4.0.5.3

Copyright:
Copyright © Rogers Cable Communications 2007

Original file name:
shs.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\rogers\selfhealing\shs.exe

Digital Signature
Signed by:
Rogers Cable Communications Inc.

Authority:
VeriSign, Inc.

Valid from:
12/3/2007 7:00:00 PM

Valid to:
1/22/2009 6:59:59 PM

Subject:
CN=Rogers Cable Communications Inc., OU=Customer Operations, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Rogers Cable Communications Inc., L=Don Mills, S=Ontario, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
745D7C864A471AE49D26F099CAB4B0BE

File PE Metadata
Compilation timestamp:
5/21/2008 1:49:49 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:uAj/9WFUU/H1fPXDzIxcP0pdZVhsXidhOtG:lj/0FO

Entry address:
0x27F02E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.5458

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
2.5 MB (2,613,248 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Rogers SHS

Command:
C:\Program Files\rogers\selfhealing\shs.exe


Scan shs.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.