home

ContextMenu64.exe

ContextMenu64

Donald Lessau

Publisher:
Donald Lessau  (signed and verified)

Product:
ContextMenu64

Description:
64-bit Context Menu Helper

Version:
1.2.3

MD5:
d02b6103f965a4455307bc120d6cc389

SHA-1:
7c2a6c591d7340231f37de6f15d547bbe0a62ab0

SHA-256:
ecfc41b981e3afad7bcac92abd96486d2b5d3ac041d98ae412cc51460670e04c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 7:13:30 AM UTC  (today)

File size:
512.1 KB (524,352 bytes)

Product version:
1.2.3

Copyright:
Copyright (c) 2013, Mesh

Original file name:
ContextMenu64.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\xyplorer\contextmenu64.exe

Digital Signature
Signed by:
Donald Lessau

Authority:
COMODO CA Limited

Valid from:
6/16/2013 8:00:00 PM

Valid to:
6/17/2018 7:59:59 PM

Subject:
CN=Donald Lessau, O=Donald Lessau, STREET=Seyengasse 1a, L=Cologne, S=NRW, PostalCode=50674, C=DE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
3493ADCC9E78BF18A847883EFB5F50DA

File PE Metadata
Compilation timestamp:
10/18/2013 8:02:08 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:pfH7JIfuoCukB81Kk/VNl6cyWnCQdbNwRIKdcAHIckxKwKBRzn:pfFIpCu+kNNlJyIZycAHGxLKn

Entry address:
0x13F33F

Entry point:
57, 56, 53, 51, 52, 41, 50, 48, 8D, 05, DE, 0A, 00, 00, 48, 8B, 30, 48, 03, F0, 48, 2B, C0, 48, 8B, FE, 66, AD, C1, E0, 0C, 48, 8B, C8, 50, AD, 2B, C8, 48, 03, F1, 8B, C8, 57, 44, 8B, C1, FF, C9, 8A, 44, 39, 06, 88, 04, 31, 75, F5, 41, 51, 55, 2B, C0, AC, 8B, C8, C1, E9, 04, 51, 24, 0F, 50, AC, 8B, C8, 02, 0C, 24, 50, 48, C7, C5, 00, FD, FF, FF, 48, D3, E5, 59, 58, 48, C1, E0, 20, 48, 03, C8, 58, 48, 8B, DC, 48, 8D, A4, 6C, 90, F1, FF, FF, 50, 51, 48, 2B, C9, 51, 51, 48, 8B, CC, 51, 66, 8B, 17, C1, E2, 0C...
 
[+]

Entropy:
7.8531  (probably packed)

Code size:
856 KB (876,544 bytes)

Scan ContextMenu64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.