home

xr2shell.dll

Eriks Aleksans

Publisher:
Eriks Aleksans  (signed and verified)

Version:
1.0.0.7

MD5:
e57aa27ee71255c7596faa00a85405bf

SHA-1:
1c8b00e848345ec08983e7ac28e4b5d414cb32d5

SHA-256:
7911f266027ffa9d4ba55f0821ecef7f6cba2aecf77df5c8732aa8ab8d7f2eac

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 12:22:42 AM UTC  (today)

File size:
410 KB (419,888 bytes)

Product version:
1.0.0.7

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\xrecode ii\xr2shell.dll

Digital Signature
Signed by:
Eriks Aleksans

Authority:
COMODO CA Limited

Valid from:
8/3/2011 1:00:00 AM

Valid to:
8/3/2014 12:59:59 AM

Subject:
CN=Eriks Aleksans, O=Eriks Aleksans, STREET=Ozolciema 42/2-89, L=Riga, S=Rigas raj., PostalCode=LV 1058, C=LV

Issuer:
CN=COMODO Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00A472A87D5477481FD0A0DA4B85A61128

File PE Metadata
Compilation timestamp:
1/8/2012 8:27:54 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6144:8MBxmxV/T7BV3cp5+AiL9duvNEDqnnulLPzq2qxaC3Exboqm:8qxmxV/T7BwCjunuFzX0Woqm

Entry address:
0x56AA0

Entry point:
55, 8B, EC, 83, C4, C0, B8, E4, 18, 45, 00, E8, F0, 3E, FB, FF, E8, 43, 02, FB, FF, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.4690

Developed / compiled with:
Microsoft Visual C++

Code size:
342 KB (350,208 bytes)

Approved Shell Extension
Name:
xrecode II shell extension

CLSID:
{9D27511A-CC65-4933-9844-B9F070B63890}

CLSID name:
xrecodeIIShellExt


Scan xr2shell.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.