home

xr2shell.dll

Eriks Aleksans

It is registered as a context menu handler (displays a menu when right-clicked in Explorer) named “xrecodeIIShellExt”.
Publisher:
Eriks Aleksans  (signed and verified)

Version:
1.0.0.7

MD5:
781ed8c04dc270fee73b19840b2492f2

SHA-1:
eed1f51d0424cf974fc3c22cb5fbe24c27a1443f

SHA-256:
e1f7b5f227a6d8837230dfbd461a47d4efe65e4dedcbe7dc09bf705e417233d1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 12:22:52 PM UTC  (today)

File size:
411.1 KB (420,952 bytes)

Product version:
1.0.0.7

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\xrecode ii\xr2shell.dll

Digital Signature
Signed by:
Eriks Aleksans

Authority:
COMODO CA Limited

Valid from:
8/3/2011 2:00:00 AM

Valid to:
8/3/2014 1:59:59 AM

Subject:
CN=Eriks Aleksans, O=Eriks Aleksans, STREET=Ozolciema 42/2-89, L=Riga, S=Rigas raj., PostalCode=LV 1058, C=LV

Issuer:
CN=COMODO Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00A472A87D5477481FD0A0DA4B85A61128

File PE Metadata
Compilation timestamp:
7/14/2012 8:39:17 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6144:CMeOUY/MmrW2wRkAiL9ysgTrLrdfe7YJjawP9O5+ay:C1OUY/MmreTr/le7YJjawlO5ry

Entry address:
0x56AA0

Entry point:
55, 8B, EC, 83, C4, C0, B8, A4, 1E, 45, 00, E8, 14, 3F, FB, FF, E8, 4B, 02, FB, FF, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
343 KB (351,232 bytes)

Context Menu Handler
Display name:
xrecodeIIShellExt

CLSID:
{9D27511A-CC65-4933-9844-B9F070B63890}

CLSID name:
xrecodeIIShellExt


Scan xr2shell.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.