home

startmenuhelper64.dll

Classic Shell

Ivaylo Beltchev

Publisher:
IvoSoft  (signed by Ivaylo Beltchev)

Product:
Classic Shell

Description:
Start Menu Helper Extension

Version:
4, 0, 0, 0

MD5:
a1991a4917ff283f69e64e12c4a3e57b

SHA-1:
6e9cbfaf70b47b480e17704ca7bc6a1dcc5f11d5

SHA-256:
06202e6ad5d36e9f004ae7b10c81ee1bc2ffdf06e632f806dcb3e8a477f2c3a6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 2:06:48 PM UTC  (today)

File size:
324 KB (331,744 bytes)

Product version:
4, 0, 0, 0

Copyright:
Copyright (C) 2009-2013, Ivo Beltchev

Original file name:
StartMenuHelper.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\classicshellpdb_4_0_0\pdb64\startmenuhelper64.dll

Digital Signature
Signed by:
Ivaylo Beltchev

Authority:
StartCom Ltd.

Valid from:
7/6/2013 4:10:27 PM

Valid to:
7/7/2015 5:07:17 AM

Subject:
E=ivo@ibeltchev.com, CN=Ivaylo Beltchev, L=Redmond, S=Washington, C=US, Description=Wkn3SU1V6I6wWa28

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0A5B

File PE Metadata
Compilation timestamp:
10/5/2013 8:34:08 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:mLpal2ZC/NgLcPRHkzI5nMrFl3SY1OeocAxS6mLPecFd:Ap+F9EI5M5pSY1ksHnd

Entry address:
0x229A0

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 1F, 68, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, AB, FE, FF, FF, CC, CC, CC, 40, 53, 48, 83, EC, 30, 49, 8B, C0, 4D, 85, C9, 74, 4B, 48, 85, C9, 75, 25, E8, 70, 3E, 00, 00, BB, 16, 00, 00, 00, 48, 83, 64, 24, 20, 00, 45, 33, C9, 45, 33, C0, 33, D2, 33, C9, 89, 18, E8, 8C, 03, 00, 00, 8B, C3, EB, 23, 48, 85, C0, 74, D6, 49, 3B, D1...
 
[+]

Entropy:
6.1432

Code size:
227 KB (232,448 bytes)

Scan startmenuhelper64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.