home

ContextMenu64.exe

ContextMenu64

Donald Lessau

Publisher:
Donald Lessau  (signed and verified)

Product:
ContextMenu64

Description:
64-bit Context Menu Helper

Version:
1.2.3

MD5:
dfe5ea0a361a66e232ffce06819ba39f

SHA-1:
b2c4c175d8279a3c0e3c2992fae7125fa111df25

SHA-256:
39771fbf912171277b0961b065e19233beec73a9d312b7848afd96f60706827a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 7:42:03 PM UTC  (today)

File size:
512.1 KB (524,352 bytes)

Product version:
1.2.3

Copyright:
Copyright (c) 2013, Mesh

Original file name:
ContextMenu64.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\xyplorer\contextmenu64.exe

Digital Signature
Signed by:
Donald Lessau

Authority:
COMODO CA Limited

Valid from:
6/17/2013 2:00:00 AM

Valid to:
6/18/2018 1:59:59 AM

Subject:
CN=Donald Lessau, O=Donald Lessau, STREET=Seyengasse 1a, L=Cologne, S=NRW, PostalCode=50674, C=DE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
3493ADCC9E78BF18A847883EFB5F50DA

File PE Metadata
Compilation timestamp:
10/19/2013 2:02:08 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:zfH7JIfuoCukB81Kk/VNl6cyWnCQdbNwRIKdcAHIckxKwKBRzx:zfFIpCu+kNNlJyIZycAHGxLKx

Entry address:
0x13F33F

Entry point:
57, 56, 53, 51, 52, 41, 50, 48, 8D, 05, DE, 0A, 00, 00, 48, 8B, 30, 48, 03, F0, 48, 2B, C0, 48, 8B, FE, 66, AD, C1, E0, 0C, 48, 8B, C8, 50, AD, 2B, C8, 48, 03, F1, 8B, C8, 57, 44, 8B, C1, FF, C9, 8A, 44, 39, 06, 88, 04, 31, 75, F5, 41, 51, 55, 2B, C0, AC, 8B, C8, C1, E9, 04, 51, 24, 0F, 50, AC, 8B, C8, 02, 0C, 24, 50, 48, C7, C5, 00, FD, FF, FF, 48, D3, E5, 59, 58, 48, C1, E0, 20, 48, 03, C8, 58, 48, 8B, DC, 48, 8D, A4, 6C, 90, F1, FF, FF, 50, 51, 48, 2B, C9, 51, 51, 48, 8B, CC, 51, 66, 8B, 17, C1, E2, 0C...
 
[+]

Code size:
856 KB (876,544 bytes)

Scan ContextMenu64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.