» virtualdiskshellextension.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

virtualdiskshellextension.dll

Virtual Disk Utility Shell Extension

KACE NETWORKS, INC.

It is registered as a context menu handler (displays a menu when right-clicked in Explorer) named “KvdToolExt_Create”.

File name:

Publisher:

KACE NETWORKS, INC. (signed and verified)

Product:

Virtual Disk Utility Shell Extension

Version:

1.0.32384

MD5:

0a6b5708bd7d733ac2befccb41040e70

SHA-1:

646ff0d8dac2ae1700c2137308a36499c4f889bc

SHA-256:

7c251fecffa34ebc4418062510eee83216f079e7dfbcf79ef4987ebe4f592baa

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/27/2024 12:29:37 AM UTC (today)

File size:

226.8 KB (232,280 bytes)

Product version:

1.0.32384

Original file name:

KvdToolExt.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\kace\virtual disk utility\virtualdiskshellextension.dll

Digital Signature

Signed by:

KACE NETWORKS, INC.

Authority:

GoDaddy.com, Inc.

Valid from:

12/14/2009 3:10:24 PM

Valid to:

12/14/2010 3:10:24 PM

Subject:

CN="KACE NETWORKS, INC.", O="KACE NETWORKS, INC.", L=Mountain View, S=CA, C=US

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

03ED27A6A5D832

Registration

CLSIDs:

{3A72A015-2B6F-436A-B6E3-9234860802AF}, {6FBE54FC-7B53-4295-AAC1-B8FC6D06B217}, {B3681FA5-781F-4B0E-BB24-7C077407C6D0}

COM registered:

Yes

File PE Metadata

Compilation timestamp:

7/14/2010 6:04:12 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

6144:0a/Kz37B0OguX1NURD/tvSut7TCutzq4eVu:fKT7B01uXfURDHa3Vu

Entry address:

0x130D0

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, AF, 7A, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, AB, FE, FF, FF, CC, CC, CC, 40, 55, 41, 54, 41, 55, 41, 56, 41, 57, 48, 83, EC, 60, 48, 8D, 6C, 24, 40, 48, 89, 5D, 50, 48, 89, 75, 58, 48, 89, 7D, 60, 48, 8B, 05, 42, DB, 01, 00, 48, 33, C5, 48, 89, 45, 18, 44, 8B, 15, 38, F9, 01, 00, BE, 02, 00, 00, 00, 33, FF, 4D, 8B, D9, 4C, 89... 
[+]

Entropy:

6.2007

Code size:

144 KB (147,456 bytes)

Context Menu Handler

Display name:

KvdToolExt_Create

CLSID:

{B3681FA5-781F-4B0E-BB24-7C077407C6D0}

CLSID name:

Create Class

The file virtualdiskshellextension.dll has been discovered within the following program.

Virtual Disk Utility by Dell Inc.

www.dell.com

8% remove it

Scan virtualdiskshellextension.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.