home

startmenuhelper64.dll

Classic Shell

Ivaylo Beltchev

Publisher:
IvoSoft  (signed by Ivaylo Beltchev)

Product:
Classic Shell

Description:
Start Menu Helper Extension

Version:
4, 2, 4, 0

MD5:
e98bff4d69af434e2ca90ab3f7440331

SHA-1:
a20b16815b186859467ee89db3eaf712223806fc

SHA-256:
7ba86c0c481d88eca5cdcf9ad84a7e3bc2b901138f5f90f094722f7ccb61c0ea

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 4:15:50 PM UTC  (today)

File size:
282.4 KB (289,216 bytes)

Product version:
4, 2, 4, 0

Copyright:
Copyright (C) 2009-2015, Ivo Beltchev

Original file name:
StartMenuHelper.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Windows\System32\startmenuhelper64.dll

Digital Signature
Signed by:
Ivaylo Beltchev

Authority:
StartCom Ltd.

Valid from:
6/27/2015 3:44:27 PM

Valid to:
6/27/2017 7:34:40 AM

Subject:
E=ivo@ibeltchev.com, CN=Ivaylo Beltchev, L=Redmond, S=Washington, C=US

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
12195DA0266A2B

Registration
CLSIDs:
{D3214FBB-3CA1-406A-B3E8-3EB7C393A15E}, {E595F05F-903F-4318-8B0A-7F633B520D2B}

COM registered:
Yes

File PE Metadata
Compilation timestamp:
8/9/2015 7:32:03 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x1CB88

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 6F, 55, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, AB, FE, FF, FF, CC, CC, CC, 40, 53, 48, 83, EC, 40, 8B, D9, 48, 8D, 4C, 24, 20, E8, F6, F0, FF, FF, 48, 8B, 44, 24, 20, 44, 0F, B6, DB, 48, 8B, 88, 40, 01, 00, 00, 42, 0F, B7, 04, 59, 25, 00, 80, 00, 00, 80, 7C, 24, 38, 00, 74, 0C, 48, 8B, 4C, 24, 30, 83, A1, C8, 00, 00, 00, FD, 48...
 
[+]

Entropy:
6.0892

Code size:
191 KB (195,584 bytes)

Scan startmenuhelper64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.