home

vba32shl.dll

vba32_shl

VIRUSBLOKADA ODO

It is registered as a context menu handler (displays a menu when right-clicked in Explorer) named “AntivirusCheck”.
Publisher:
VirusBlokAda Ltd.  (signed by VIRUSBLOKADA ODO)

Product:
vba32_shl

Version:
3.50.0.0

MD5:
569d0034f234dc1a5308e05687f5d732

SHA-1:
fb2b565659283da5b30b6c381d41dc0e8e7862dc

SHA-256:
aaabd913f727e4cfe2ad6b06c19c948f7a7e7ccd6d5dc80498cb1973ec7d21b4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 8:36:36 PM UTC  (today)

File size:
57.4 KB (58,736 bytes)

Product version:
3.50.0.0

Copyright:
Copyright © 1993-2012 VirusBlokAda Ltd.

Original file name:
vba32_shl

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\vba32\vba32shl.dll

Digital Signature
Signed by:
VIRUSBLOKADA ODO

Authority:
VeriSign, Inc.

Valid from:
2/22/2012 2:00:00 AM

Valid to:
2/22/2014 1:59:59 AM

Subject:
CN=VIRUSBLOKADA ODO, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=VIRUSBLOKADA ODO, L=Minsk, S=BY, C=BY

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2DA05BBFA05778B979ACB88C01FF8E27

Registration
CLSID:
{B43CB0C0-84F2-11D6-A18E-00C0DF043BA4}

COM registered:
Yes

File PE Metadata
Compilation timestamp:
3/13/2012 12:10:13 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1536:ggVUl8Dsh/BXp/YMC6eFSZSorABbVLO1J7mwDrxx:ggVUNvXpTC6aSZSorABpLO1J7mm

Entry address:
0x6D24

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 12, 05, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, CC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, 00, 81, 38, 63, 73, 6D, E0, 74, 03, 33, C0, C3, E9, 83, 05, 00, 00, 6A, 14, 68, 50, AA, 00, 10, E8, 63, 04, 00, 00, 83, 65, FC, 00, FF, 4D, 10, 78, 3A, 8B, 4D, 08, 2B, 4D, 0C, 89, 4D, 08, FF, 55, 14, EB, ED, 8B, 45, EC, 89, 45, E4, 8B, 45, E4, 8B, 00, 89, 45, E0, 8B, 45, E0, 81, 38, 63, 73, 6D, E0, 74, 0B, C7, 45, DC, 00, 00, 00, 00, 8B, 45, DC, C3, E8, 37, 05, 00...
 
[+]

Code size:
27.5 KB (28,160 bytes)

Context Menu Handler
Display name:
AntivirusCheck

CLSID:
{B43CB0C0-84F2-11D6-A18E-00C0DF043BA4}


Scan vba32shl.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.