Gridinsoft Logo

The StartMenuExperienceHost.exe File Analysis

Updated 2 months ago
Checked by Malaware Check
StartMenuExperienceHost.exe

Technical Analysis

File Name StartMenuExperienceHost.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.210.174
Database Version 2025-03-12 23:00:44 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
812,024
File Size (bytes)
2025-03-12
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
bcf6c51df794c13ab1fe0667a83f3f95
SHA1
b3505f89e1bb066c5c2cbaab8795fe24b17366a6
SHA256
73b0a3d97be51a306711e287f257fefb1e046f7aa6316d2b95975bc8178f4e24
SHA512
0b676b0e3cbaf57d60d1e77415bf2f7d75628ae12162681a1e7eb5a83a749732603639e3768e8e06891a2bd9bf5baf9514fd60d1da4db1777e5db87f9721634e
ImpHash
96d1603c1f71280c4f4a4155ffd8f7f1

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x140013790
Compilation Time 1979-04-01 17:18:30
Checksum 0x000c73a2 (Actual: 0x000c73a2)
OS Version 10.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path startmenuexperiencehost.pdb
Digital Signature OK
Imports 27 libraries
Exports 0 functions
Resources 0 Resources
Sections 5 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 516,237 bytes 516,608 bytes 6.11 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 3F38C14DAE3D2E55A21D677EE2DC9236
.rdata 0x00080000 200,078 bytes 200,192 bytes 5.19 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3D04E274CA2A07AFE71413FE55803F3C
.data 0x000b1000 36,800 bytes 33,280 bytes 3.42 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E368B1AADB6F5AB4BE1A06BD340A095C
.pdata 0x000ba000 41,088 bytes 41,472 bytes 5.97 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3F9964A2FEE271C08FA14D4857931BCD
.reloc 0x000c5000 9,604 bytes 9,728 bytes 5.43 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 71154226550347ACEDB941830744CD1D

Certificate Chain Analysis

▼
Certificate Information
Signing Date 05:02 AM 11/17/2024 (202 days ago)
Verification Status Signed
Signers Microsoft Windows; Microsoft Windows Production PCA 2011; Microsoft Root Certificate Authority 2010
Counter Signers Microsoft Time-Stamp Service; Microsoft Time-Stamp PCA 2010; Microsoft Root Certificate Authority 2010
Certificate Chain Summary
Microsoft Windows #1 Primary
Validity Period: 2024-09-12 20:04:07 → 2025-09-11 20:04:07
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 04 A8 82 E6 B8 AC 1C 5D 5F F0 00 00 00 00 04 A8
Microsoft Windows Production PCA 2011 #2 Chain
Validity Period: 2011-10-19 18:41:42 → 2026-10-19 18:51:42
Signature Algorithm: sha256RSA
Serial Number: 61 07 76 56 00 00 00 00 00 08
Microsoft Time-Stamp Service #3 Chain
Validity Period: 2024-07-25 18:31:21 → 2025-10-22 18:31:21
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 02 00 0B D7 AA 7F 1B 2A 17 56 00 01 00 00 02 00
Microsoft Time-Stamp PCA 2010 #4 Chain
Validity Period: 2021-09-30 18:22:25 → 2030-09-30 18:32:25
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 00 15 C5 E7 6B 9E 02 9B 49 99 00 00 00 00 00 15

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware