home

startmenux_pro64.exe

StartMenuX/StartMenu10

OrdinarySoft

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘StartMenuX’.
Publisher:
OrdinarySoft  (signed and verified)

Product:
StartMenuX/StartMenu10

Version:
6.0.2.0

MD5:
97d2f3d0bff05bc58fadd6577432fca9

SHA-1:
20d33266fa794b17a06a8c63d450cf51b189da78

SHA-256:
e6b303891768dddef3692e55e223f30a90789d037fd89f80964c9e1582cdde0d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/5/2024 12:28:26 AM UTC  (today)

File size:
8.1 MB (8,519,000 bytes)

Product version:
6.0.2

Copyright:
StartMenuX/StartMenu10

Trademarks:
StartMenuX/StartMenu10

Original file name:
StartMenuX.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\startmenux_pro64.exe

Digital Signature
Signed by:
OrdinarySoft

Authority:
Symantec Corporation

Valid from:
2/1/2016 5:30:00 AM

Valid to:
3/3/2019 5:29:59 AM

Subject:
CN=OrdinarySoft, O=OrdinarySoft, L=Vishneve, S=Kievskay obl, C=UA

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
60F4A4927D2DE396980B25F3A925E06A

File PE Metadata
Compilation timestamp:
3/7/2017 9:59:09 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x5A50A0

Entry point:
55, 48, 83, C4, 80, 48, 8B, EC, 48, C7, 45, 20, 00, 00, 00, 00, 48, C7, 45, 30, 00, 00, 00, 00, 48, C7, 45, 28, 00, 00, 00, 00, 48, C7, 45, 40, 00, 00, 00, 00, 48, C7, 45, 38, 00, 00, 00, 00, 48, C7, 45, 50, 00, 00, 00, 00, 48, C7, 45, 48, 00, 00, 00, 00, 48, C7, 45, 58, 00, 00, 00, 00, 48, C7, 45, 68, 00, 00, 00, 00, 48, C7, 45, 60, 00, 00, 00, 00, 48, C7, 45, 78, 00, 00, 00, 00, 48, C7, 45, 70, 00, 00, 00, 00, 90, 48, 8D, 0D, D0, 06, FF, FF, E8, 9B, 26, A7, FF, 90, 48, 8B, 05, 6B, 22, 07, 00, 48, 8B, 08...
 
[+]

Entropy:
6.1619

Code size:
5.6 MB (5,916,160 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
StartMenuX

Command:
"C:\Program Files\start menu 10\startmenux.exe"


Scan startmenux_pro64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.