» contextmenu_x64.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

contextmenu_x64.dll

Anvi Smart Defender

Anvei Technology Co., LTD

It is registered as a context menu handler (displays a menu when right-clicked in Explorer) named “Anvi Smart Defender”. This is installed with Anvi Smart Defender 1.8.

File name:

contextmenu_x64.dll

Publisher:

Anvisoft (signed by Anvei Technology Co., LTD)

Product:

Anvi Smart Defender

Description:

Anvi Smart Defender Service

Version:

1.6.1.1171

MD5:

747d4c3d92d9a4cc2bf4d948e8765963

SHA-1:

41b4c3e851e013af4cc15e13fb9f2e804fb9b092

SHA-256:

0fd15be9e7d42a3d83966955127f91906bd3a20c133b162a162e567710a0227b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 2:20:00 AM UTC (today)

File size:

256.1 KB (262,216 bytes)

Product version:

1.6.1.0

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\anvisoft\anvi smart defender\contextmenu_x64.dll

Digital Signature

Signed by:

Anvei Technology Co., LTD

Authority:

VeriSign, Inc.

Valid from:

10/12/2011 7:00:00 PM

Valid to:

10/12/2014 6:59:59 PM

Subject:

CN="Anvei Technology Co., LTD", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Anvei Technology Co., LTD", L=Chengdu, S=Sichuan, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

1C0BF93BBAA58FC100BA37A6E491A8FB

Registration

CLSID:

{0BB37A67-F062-4F69-8C52-80ADDD64281F}

COM registered:

Yes

File PE Metadata

Compilation timestamp:

12/18/2012 11:20:24 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

6144:hHMVV8ezCILFZR1f/La7T/EBhaKaIu6TnAK/idUiazu:R+8ezjPR1yK/iKu

Entry address:

0xF440

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, AB, 9C, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, A7, FE, FF, FF, CC, CC, CC, 4C, 8D, 0D, 89, A6, 02, 00, 33, C0, 49, 8B, D1, 44, 8D, 40, 08, 3B, 0A, 74, 2B, FF, C0, 49, 03, D0, 83, F8, 2D, 72, F2, 8D, 41, ED, 83, F8, 11, 77, 06, B8, 0D, 00, 00, 00, C3, 81, C1, 44, FF, FF, FF, B8, 16, 00, 00, 00, 83, F9, 0E, 41, 0F, 46, C0, C3, 48... 
[+]

Entropy:

6.2112

Code size:

168 KB (172,032 bytes)

Context Menu Handler

Display name:

Anvi Smart Defender

CLSID:

{0BB37A67-F062-4F69-8C52-80ADDD64281F}

CLSID name:

ShellMenuExt Class

The file contextmenu_x64.dll has been discovered within the following program.

Anvi Smart Defender 1.8 by Anvisoft

Publisher's description - “Anvi Smart defender delivers smart and powerful protection against malicious software, such as virus, Trojans, adware, spyware, bots and other threats. With the Swordfish Engine, it scans and detects these threats fast and lightly.”

www.anvisoft.com/smart-defender.html

55% remove it

Scan contextmenu_x64.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.