home

startmenuxhook32.dll

StartMenuXP

OrdinarySoft

Publisher:
OrdinarySoft.  (signed by OrdinarySoft)

Product:
StartMenuXP

Description:
StartMenuXP integration hook

Version:
4, 0, 0, 0

MD5:
b986949efd01013bfe9d81207f0199c1

SHA-1:
7bffc85571d202852658d54024ebef121e05856c

SHA-256:
209eb9eb49edaa4c2533bbce6c6b6f2b42344edc042273dcd2834161fbcdf1ad

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/11/2024 12:21:04 AM UTC  (today)

File size:
58.9 KB (60,288 bytes)

Product version:
4, 0, 0, 0

Copyright:
OrdinarySoft (C) 2011

Original file name:
StartMenuXHook

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\start menu xp\startmenuxhook32.dll

Digital Signature
Signed by:
OrdinarySoft

Authority:
VeriSign, Inc.

Valid from:
12/28/2010 3:00:00 AM

Valid to:
12/31/2011 2:59:59 AM

Subject:
CN=OrdinarySoft, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=OrdinarySoft, L=Vishneve, S=Kievskaya, C=UA

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
16690BA8ACB946D3B4DCCDB54D0F3540

File PE Metadata
Compilation timestamp:
3/28/2011 3:44:32 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
768:+fOri9kAKejEP03adsH7mSUMEMsdaFLVn1U2IGhMRqXy8KxEI4V+Ll:+fOe60AsyFeJUTTRqXy8KxNJ

Entry address:
0x1428

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, B4, 18, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 00, CE, 00, 10, 89, 0D, FC, CD, 00, 10, 89, 15, F8, CD, 00, 10, 89, 1D, F4, CD, 00, 10, 89, 35, F0, CD, 00, 10, 89, 3D, EC, CD, 00, 10, 66, 8C, 15, 18, CE, 00, 10, 66, 8C, 0D, 0C, CE, 00, 10, 66, 8C, 1D, E8, CD, 00, 10, 66, 8C, 05, E4, CD, 00, 10, 66, 8C, 25, E0, CD, 00, 10, 66, 8C, 2D, DC, CD, 00, 10, 9C, 8F, 05, 10, CE...
 
[+]

Code size:
31.5 KB (32,256 bytes)

Scan startmenuxhook32.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.