home

Microsoft.WindowsAPICodePack.Shell.dll

Microsoft Windows API Code Pack for .NET Framework

Kitco Metals Inc.

Publisher:
Microsoft  (signed by Kitco Metals Inc.)

Product:
Microsoft Windows API Code Pack for .NET Framework

Description:
Microsoft.WindowsAPICodePack.Shell

Version:
1.1.0.0

MD5:
012a68b2a6715d41c48993bf5ff63bf4

SHA-1:
d3e00dc562910a961fbe863d4aeada84da8ab4c5

SHA-256:
7e79f2e7d8d21b5f4bbd8e54d295d9c9db94d22f3b09eddd136328a5d4770287

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 9:55:34 AM UTC  (today)

File size:
537 KB (549,880 bytes)

Product version:
1.1.0.0

Copyright:
Copyright © Microsoft 2010

Original file name:
Microsoft.WindowsAPICodePack.Shell.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\programs\kitco\microsoft.windowsapicodepack.shell.dll

Digital Signature
Signed by:
Kitco Metals Inc.

Authority:
Thawte, Inc.

Valid from:
12/9/2010 7:00:00 PM

Valid to:
12/2/2011 6:59:59 PM

Subject:
CN=Kitco Metals Inc., OU=Information Technology, O=Kitco Metals Inc., L=Montreal, S=Quebec, C=CA

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
1E99CA51C20ED65C52EC733D57BB42B4

File PE Metadata
Compilation timestamp:
8/2/2010 11:51:03 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:ztIgLGv5WBfXkYlsL/Nz++R1yji08n3uzxRQKEPmBm9C5vEx3tcQ8Vub8xPtwZEM:Tz81Dn3GQ/9C58x3tWXH9gvJ

Entry address:
0x85BFE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.8757

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
527.5 KB (540,160 bytes)

Scan Microsoft.WindowsAPICodePack.Shell.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.