» ClassicShellUpdate.exe
Overview
Analysis
File Details
Programs (3)

ClassicShellUpdate.exe

Classic Shell

Ivaylo Beltchev

This is installed with multiple programs including Classic Shell.

File name:

Publisher:

IvoSoft (signed by Ivaylo Beltchev)

Product:

Classic Shell

Description:

Checks for a new version of Classic Shell

Version:

4, 0, 6, 0

MD5:

ea59c63c7627c064750e9b7c1a3d89a6

SHA-1:

208b38e8ba6eb4f77fa791d85ad161490dd44bab

SHA-256:

dd0b7f2ec3d3051461af57ab590bb4f993d4038a92216e61c6a9d47f763f948b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 3:23:42 PM UTC (today)

File size:

327.2 KB (335,040 bytes)

Product version:

4, 0, 6, 0

Original file name:

ClassicShellUpdate.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\classic shell\classicshellupdate.exe

Digital Signature

Signed by:

Ivaylo Beltchev

Authority:

StartCom Ltd.

Valid from:

7/6/2013 3:10:27 AM

Valid to:

7/6/2015 4:07:17 PM

Subject:

E=ivo@ibeltchev.com, CN=Ivaylo Beltchev, L=Redmond, S=Washington, C=US, Description=Wkn3SU1V6I6wWa28

Issuer:

CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:

0A5B

File PE Metadata

Compilation timestamp:

4/5/2014 2:18:26 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

6144:oVnRfPXdUxYegDXnk2LFZyK3ZsLYHA7I/2bXwxelY:oVRaNEXnnpZyK3W+z/2bpY

Entry address:

0x1B219

Entry point:

E8, 76, 6A, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 8B, D0, 66, 8B, 08, 40, 40, 66, 85, C9, 75, F6, 66, 8B, 4D, 0C, 48, 48, 3B, C2, 74, 05, 66, 39, 08, 75, F5, 66, 39, 08, 74, 02, 33, C0, 5D, C3, 8B, FF, 55, 8B, EC, 83, EC, 20, 56, 33, F6, 39, 75, 0C, 75, 1D, E8, C6, 1A, 00, 00, 56, 56, 56, 56, 56, C7, 00, 16, 00, 00, 00, E8, C7, EE, FF, FF, 83, C4, 14, 83, C8, FF, EB, 27, FF, 75, 14, 8D, 45, E0, FF, 75, 10, C7, 45, E4, FF, FF, FF, 7F, FF, 75, 0C, C7, 45, EC, 42, 00, 00, 00, 50, 89, 75... 
[+]

Entropy:

6.3119

Code size:

182.5 KB (186,880 bytes)

The file ClassicShellUpdate.exe has been discovered within the following programs.

Classic Shell by IvoSoft

Publisher's description - “Classic Shell is a collection of features that were available in older versions of Windows but are removed from Vista and Windows 7. It has a classic start menu for Windows 7. It adds a toolbar for Windows Explorer and supports a variety of smaller features.”

classicshell.sourceforge.net

8% remove it

Office Addin by Acer Incorporated

Office-Addin is part of the AcerCloud platform and is designed to integrate with Microsoft Office products (Word, PowerPoint and Excel) and to backup files to the cloud.

www.acer.com

11% remove it

Yahoo Community Smartbar Engine by Linkury Inc.

Yahoo Community Smartbar Engine is a web browser toolbar and extension that modifies the browsers search and home pages as well as delivers contextual based advertising. This toolbar currently supports Internet Explorer, Firefox and Chrome.

63% remove it

Scan ClassicShellUpdate.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.