home

SpyShelterProtHlp.dll

SpyShelter

Datpol Janusz Siemienowicz

Publisher:
Datpol  (signed by Datpol Janusz Siemienowicz)

Product:
SpyShelter

Description:
SpyShelter UM Helper Dll

Version:
10,1,0,0

MD5:
5568e2cbec92936faf7fd0077e79c4ec

SHA-1:
a8434a20f8d42677a8b1fb66b043bd724cd98fec

SHA-256:
4dea14512ef2475576aba29f1e4074b44f90e2e7d199cf22e9fe7df4b6b4913c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/29/2024 11:50:48 PM UTC  (a few moments ago)

File size:
75.4 KB (77,232 bytes)

Product version:
10,1,0,0

Copyright:
(C) Datpol. All rights reserved.

Original file name:
SpyShelterProtHlp.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Windows\System32\spyshelterprothlp.dll

Digital Signature
Signed by:
Datpol Janusz Siemienowicz

Authority:
GlobalSign nv-sa

Valid from:
11/5/2014 1:08:03 PM

Valid to:
1/8/2016 11:09:30 AM

Subject:
E=biuro@datpol.com, CN=Datpol Janusz Siemienowicz, O=Datpol Janusz Siemienowicz, L=Olkusz, S=Malopolskie, C=PL

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121D2FCC60F24553FA9E8F529B814703D51

File PE Metadata
Compilation timestamp:
8/28/2015 7:32:21 AM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
768:NaJLsbujLOMhjXZgDHSKE7Ps9N4YlwRklFZIpfR4p9BGKEWMKD/RGCJ9vbk5tGcr:jMTph8ZnfRiCSEE4zjKX2M

Entry address:
0x50E4

Entry point:
48, 83, EC, 38, 83, FA, 01, 75, 20, 83, 64, 24, 20, 00, 45, 33, C9, 45, 33, C0, 33, D2, B9, 74, E4, 22, 00, E8, E0, 06, 00, 00, 85, C0, 78, 05, E8, CF, 19, 00, 00, B8, 01, 00, 00, 00, 48, 83, C4, 38, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, 48, 8B, C4, 48, 89, 58, 08, 48, 89, 68, 10, 48, 89, 70, 18, 57, 48, 83, EC, 50, BA, 44, 00, 00, 00, C6, 40, C9, 62, C6, 40, CA, 67, C6, 40, CB, 50, C6, 40, CC, 72, C6, 40, CD, 69, 88, 50, C8, 48, 8B, D9, 8D, 4A, 30, 8D, 42, 2A, 88, 4C, 24, 27, 66, 89, 4C, 24, 32, 8D, 4A...
 
[+]

Entropy:
5.4547

Code size:
52 KB (53,248 bytes)

Ini File Mappings System INI
Name:
APPINIT_DLLS


Scan SpyShelterProtHlp.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.