home

PWRISOSH.DLL

PowerISO Shell Dynamic Link Library

Power Software Limited

Publisher:
Power Software Ltd  (signed by Power Software Limited)

Product:
PowerISO Shell Dynamic Link Library

Description:
PowerISOShell DLL

Version:
6, 4, 0, 0

MD5:
eb1b9b006f1fb5f0ecfc76e195df640e

SHA-1:
ef01da990a45a6e8e164b33477d89cabd0f5fc5e

SHA-256:
5fcf51b22680d08ff6bbbc75265ef1e32f247d5011623b09caa3f0f32eeecb76

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

False Positives:
A number of engines detected this file but were erroneous detections (false positives).

Analysis date:
11/2/2024 11:31:02 AM UTC  (today)

File size:
231.4 KB (236,992 bytes)

Product version:
6, 4, 0, 0

Copyright:
Copyright (C) 2004-2015

Original file name:
PWRISOSH.DLL

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Program Files\poweriso\pwrisosh.dll

Digital Signature
Signed by:
Power Software Limited

Authority:
Symantec Corporation

Valid from:
12/17/2015 4:00:00 PM

Valid to:
6/25/2017 4:59:59 PM

Subject:
CN=Power Software Limited, O=Power Software Limited, L=Hong Kong, S=Hong Kong, C=HK

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
2E3B3D0363ACEC80699F4CBF1A5F09DD

Registration
CLSID:
{967B2D40-8B7D-4127-9049-61EA0C2C6DCE}

COM registered:
Yes

File PE Metadata
Compilation timestamp:
10/5/2015 5:36:38 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3072:z7tJIjnqzE56i1t/b6KQamIquvGn/wb1/57VeYyYIEpOOTWWtprZ+1LPFBN6jUwD:dabEirzxmIcn/IfxepZdW1+DyZD

Entry address:
0xE220

Entry point:
48, 83, EC, 28, 85, D2, 48, 89, 5C, 24, 30, 48, 89, 6C, 24, 38, 48, 89, 74, 24, 40, 8B, DA, 48, 8B, E9, 49, 8B, F0, 75, 1E, 39, 15, 5B, EB, 02, 00, 75, 59, 33, C0, 48, 8B, 74, 24, 40, 48, 8B, 6C, 24, 38, 48, 8B, 5C, 24, 30, 48, 83, C4, 28, C3, 83, FA, 01, 74, 05, 83, FA, 02, 75, 39, 48, 8B, 05, A2, 08, 03, 00, 48, 85, C0, 74, 06, FF, D0, 85, C0, 74, 11, 4C, 8B, C6, 8B, D3, 48, 8B, CD, E8, 8A, FD, FF, FF, 85, C0, 75, 16, 33, C0, 48, 8B, 74, 24, 40, 48, 8B, 6C, 24, 38, 48, 8B, 5C, 24, 30, 48, 83, C4, 28, C3...
 
[+]

Entropy:
5.9825

Code size:
135 KB (138,240 bytes)

Approved Shell Extension
Name:
PowerISO

CLSID:
{967B2D40-8B7D-4127-9049-61EA0C2C6DCE}


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.