home

xr2shell64.dll

Eriks Aleksans

Publisher:
xrecode.com  (signed by Eriks Aleksans)

Description:
Shell extension for xrecode II

Version:
1.0.0.9

MD5:
0e4fbbbd9e86a24a671758e630d4371f

SHA-1:
06b4dfe77df912d61bff07feba9ce1b7b748bee6

SHA-256:
dd6475f2d3215ec50cd695c54bda462e4bc7861b017398aad988d7d2b46c8292

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/15/2025 12:41:43 AM UTC  (today)

File size:
1.2 MB (1,276,968 bytes)

Product version:
1.0.0.9

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\Program Files\xrecode ii\xr2shell64.dll

Digital Signature
Signed by:
Eriks Aleksans

Authority:
StartCom Ltd.

Valid from:
7/14/2014 4:00:57 PM

Valid to:
7/14/2016 1:26:30 PM

Subject:
E=aleksans.eriks@gmail.com, CN=Eriks Aleksans, L=Riga, S=Rigas, C=LV, Description=3T9WSap28bKoscj1

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0F2F

File PE Metadata
Compilation timestamp:
2/1/2016 4:26:38 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:1DtQk5RH8XuebbfXF+2FzH5cILY6ImMIc3agp5LKTbxS1Ws/rpQsjHvHoDsRY9:1D7/ebbfXjCIUaG5S9qwDsR4

Entry address:
0xFED80

Entry point:
55, 48, 81, EC, 80, 01, 00, 00, 48, 8B, EC, 48, 89, 4D, 30, 89, 55, 3C, 4C, 89, 45, 40, 90, 48, 8D, 4D, 48, E8, A0, C5, F0, FF, 83, F8, 01, 0F, 9E, C1, 48, 0F, B6, C9, 89, 8D, 7C, 01, 00, 00, 85, C0, 75, 30, 48, 8D, 4D, 48, 48, 8D, 15, 79, 77, FF, FF, 4C, 8B, 45, 30, 44, 8B, 4D, 3C, 48, 8B, 45, 40, 48, 89, 44, 24, 20, E8, 2B, 30, F1, FF, EB, 08, 90, 90, E8, 42, BD, F0, FF, 90, E8, BC, C6, F0, FF, 8B, 85, 7C, 01, 00, 00, 48, 8D, A5, 80, 01, 00, 00, 5D, C3, 48, 8D, 44, 20, 00, 48, 8D, 04, 05, 00, 00, 00, 00...
 
[+]

Entropy:
5.8312

Code size:
1016 KB (1,040,384 bytes)

Approved Shell Extension
Name:
xrecode II shell extension

CLSID:
{9D27511A-CC65-4933-9844-B9F070B63891}

CLSID name:
xrecodeIIShellExt64


Scan xr2shell64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.