home

fr-fr.dll

Classic Shell

IvoSoft

Publisher:
IvoSoft

Product:
Classic Shell

Description:
fr-FR

Version:
3, 6, 8, 0

MD5:
3d6dabcfcab3b1462f51541e13ee9b04

SHA-1:
8f820ad7887bad9af127bdce00e9d54bb37fc4b5

SHA-256:
4ddf0937da10eae46f2e83cc6431238883b63f814e64a40042a21348e3b02e27

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/15/2025 1:27:47 PM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V0802
7.2.46

File size:
134.5 KB (137,728 bytes)

Product version:
3, 6, 8, 0

Copyright:
Copyright (C) 2009-2013, Ivo Beltchev

Original file name:
fr-FR

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\fr-fr.dll

File PE Metadata
Compilation timestamp:
1/30/2011 6:40:46 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
768:j/MKPffDs+TiCAwlQ0oGTaatgrk14zi6Jq7sFv2TKwyq7kTfz1FpAmSj77WRBtUQ:jbfw+wwlQbatUJq7scodxCcdjdf

Entry address:
0x1233

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 09, 16, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 56, FF, 35, 04, A0, 00, 10, 8B, 35, 10, 80, 00, 10, FF, D6, 85, C0, 74, 21, A1, 00, A0, 00, 10, 83, F8, FF, 74, 17, 50, FF, 35, 04, A0, 00, 10, FF, D6, FF, D0, 85, C0, 74, 08, 8B, 80, F8, 01, 00, 00, EB, 27, BE, 2C, 81, 00, 10, 56, FF, 15, 08, 80, 00, 10, 85, C0, 75, 0B, 56, E8, 29, 07, 00, 00, 59, 85, C0, 74, 18, 68, 1C, 81, 00, 10, 50, FF, 15, 0C...
 
[+]

Code size:
25 KB (25,600 bytes)

The file fr-fr.dll has been seen being distributed by the following URL.

http://classicshell.mediafire.com/download/.../fr-FR.dll

Scan fr-fr.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.