home

smadextc.dll

SmadExt

Smadsoft

It is registered as a context menu handler (displays a menu when right-clicked in Explorer) named “SmadExt”.
Publisher:
Smadsoft

Product:
SmadExt

Description:
Smadav shell extension

Version:
1.1.0.0

MD5:
14ceda21d2a3a4cd51e7f07f671da908

SHA-1:
62663acc2da71846da6cfc97ba11c3603e058ffe

SHA-256:
d39200a188d5e4c308920269affe7440b9d04c43ea00512e94ecbaf24818adc5

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/1/2025 8:22:30 PM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
Win.Trojan.Ramnit-1847
0.98/23207

File size:
195.9 KB (200,606 bytes)

Product version:
1.1.0.0

Copyright:
Copyright (C) 2010

Original file name:
SmadExt.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\smadav\smadextc.dll

Registration
CLSID:
{8AB81E72-CB2F-11D3-8D3B-AC2F34F1FA3C}

COM registered:
Yes

File PE Metadata
Compilation timestamp:
2/19/2010 4:26:17 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x1D000

Entry point:
60, E8, 00, 00, 00, 00, 5D, 8B, C5, 81, ED, CE, B2, 01, 20, 2B, 85, 35, BA, 01, 20, 89, 85, 31, BA, 01, 20, B0, 00, 86, 85, 66, BC, 01, 20, 3C, 01, 0F, 85, BC, 01, 00, 00, 83, BD, 61, BB, 01, 20, 00, 74, 33, 83, BD, 65, BB, 01, 20, 00, 74, 2A, 8B, 85, 31, BA, 01, 20, 2B, 85, 61, BB, 01, 20, 8B, 00, 89, 85, 9E, BB, 01, 20, 8B, 85, 31, BA, 01, 20, 2B, 85, 65, BB, 01, 20, 8B, 00, 89, 85, A2, BB, 01, 20, EB, 61, 83, BD, 69, BB, 01, 20, 00, 74, 58, 8B, 85, 31, BA, 01, 20, 2B, 85, 69, BB, 01, 20, FF, 30, 8D, 85...
 
[+]

Entropy:
7.4406

Packer / compiler:
ASPack v1.08.04

Code size:
62.5 KB (64,000 bytes)

Context Menu Handler
Display name:
SmadExt

CLSID:
{8AB81E72-CB2F-11D3-8D3B-AC2F34F1FA3C}

CLSID name:
SmadExt Class


Scan smadextc.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.