home

LDShellMenu.DLL

联想企业网盘盘符版

Lenovo (Beijing) Limited

Publisher:
Lenovo  (signed by Lenovo (Beijing) Limited)

Product:
联想企业网盘盘符版

Version:
2.1.0.28

MD5:
fd0958ac66186d0a10c56eab38cf574f

SHA-1:
37861a26bcb232cd124399f719f3a2a4bc848f1b

SHA-256:
c989ca002d70e87d7c9995cc580da05bb0cdbbc3ad74377ad43adbd0cbafe416

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 12:51:51 PM UTC  (today)

File size:
3.6 MB (3,761,856 bytes)

Product version:
2.1.0.28

Copyright:
版权所有 2012 联想集团有限公司

Original file name:
LDShellMenu.DLL

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Program Files\lenovo\lenovodata\ldshellmenu.dll

Digital Signature
Signed by:
Lenovo (Beijing) Limited

Authority:
Thawte, Inc.

Valid from:
3/19/2013 1:00:00 AM

Valid to:
4/19/2015 1:59:59 AM

Subject:
CN=Lenovo (Beijing) Limited, O=Lenovo (Beijing) Limited, L=Beijing, S=Beijing, C=CN

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
1B4F4F5F3E6EA9B04AAB02E43006E421

Registration
CLSIDs:
{7C2E2734-41F9-41FC-AB53-41493F5C86DB}, {BDC925B7-3246-446D-A1CC-3BE0B5DDFA48}, {C239334B-EE98-488F-801F-641D2DE23808}

ProgIDs:
LDFSEx.ContextMenuExtension, LDFSEx.SendToExtension, LDFSEx.OverlayIconExtension

COM registered:
Yes

File PE Metadata
Compilation timestamp:
12/12/2013 9:33:46 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:sDV49uAXnzRA6Q2ewlGrVCm/OrLinPvy/rjDKUnEGBc7bdOC/06btgj7psG:sZ27lM93y/Qd/0LmG

Entry address:
0x1DC9C0

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 4B, B3, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, A7, FE, FF, FF, CC, CC, CC, 40, 53, 48, 83, EC, 20, 33, DB, 4D, 8B, D0, 4D, 85, C9, 75, 0E, 48, 85, C9, 75, 0E, 48, 85, D2, 75, 20, 33, C0, EB, 2F, 48, 85, C9, 74, 17, 48, 85, D2, 74, 12, 4D, 85, C9, 75, 05, 66, 89, 19, EB, E8, 4D, 85, C0, 75, 1C, 66, 89, 19, E8, 99, 01, 00, 00, BB...
 
[+]

Code size:
2 MB (2,135,040 bytes)

Approved Shell Extension
Name:
CLDFSSendTo

CLSID:
{BDC925B7-3246-446D-A1CC-3BE0B5DDFA48}

CLSID name:
LDFSEx.SendToExtension


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.