home

Microsoft.WindowsAPICodePack.Shell.dll

Microsoft Windows API Code Pack for .NET Framework

Lenovo.Ltd

Publisher:
Microsoft  (signed by Lenovo.Ltd)

Product:
Microsoft Windows API Code Pack for .NET Framework

Description:
Microsoft.WindowsAPICodePack.Shell

Version:
1.1.0.0

MD5:
be28b526d7307f2726c29dd6d57f971d

SHA-1:
659b1beb702d4b8acc8a66fc4e449b13c0e3ee3c

SHA-256:
43f35ab7541b12b210a4135221dee3debb91cfff68b47b31f4874110c6a0bc16

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 12:26:52 PM UTC  (today)

File size:
538.7 KB (551,624 bytes)

Product version:
1.1.0.0

Copyright:
Copyright © Microsoft 2010

Original file name:
Microsoft.WindowsAPICodePack.Shell.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\lenovo\xiaou\uninstall\lenovoportal32\microsoft.windowsapicodepack.shell.dll

Digital Signature
Signed by:
Lenovo.Ltd

Authority:
VeriSign, Inc.

Valid from:
7/12/2014 8:00:00 AM

Valid to:
1/16/2015 7:59:59 AM

Subject:
CN=Lenovo.Ltd, O=Lenovo.Ltd, L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4BF0ED60C39506CEB8FE1BB657C28136

File PE Metadata
Compilation timestamp:
8/3/2010 11:51:03 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:rtIgLGv5WBfXkYlsL/Nz++R1yji08n3uzxRQKEPmBm9C5vEx3tcQ8Vub8xPtwZEN:Lz81Dn3GQ/9C58x3tWXH9gvA

Entry address:
0x85BFE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.8830

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
527.5 KB (540,160 bytes)

Scan Microsoft.WindowsAPICodePack.Shell.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.