» contextmenu_64.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

contextmenu_64.dll

Advanced Folder Encryption

Kakasoft Software Co. Ltd

This is installed with Advanced Folder Encryption.

File name:

contextmenu_64.dll

Publisher:

kakasoft (signed by Kakasoft Software Co. Ltd)

Product:

Advanced Folder Encryption

Description:

Shell Extension

Version:

2.2.0.0

MD5:

c7849f0a13b3122b10d2407fdb96e404

SHA-1:

09c99670067a60fca90c62093282d389039ed08a

SHA-256:

2ab33e5ee795fa4fded9d3cbd890aa0148321d68f225529b901f07bb4d728213

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 6:33:34 PM UTC (today)

File size:

650.3 KB (665,880 bytes)

Product version:

2.2.0.0

Original file name:

ContextMenu.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\advanced folder encryption\contextmenu_64.dll

Digital Signature

Signed by:

Kakasoft Software Co. Ltd

Authority:

Thawte, Inc.

Valid from:

11/20/2012 1:00:00 AM

Valid to:

11/21/2014 12:59:59 AM

Subject:

CN=Kakasoft Software Co. Ltd, O=Kakasoft Software Co. Ltd, L=shenzhen, S=guangdong, C=CN

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

6C54BB642CF1C0097FC29E20512C7527

File PE Metadata

Compilation timestamp:

2/12/2012 1:00:04 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

6144:mQ5hXxsNGKN7ufbULb8VviKCIDJgRJPoeyomJnK11nNSAFOd/8dD+tv:J0NGKJiYH8BXDJ6JmJKDNXFOtSDa

Entry address:

0x806A0

Entry point:

55, 48, 81, EC, 90, 00, 00, 00, 48, 8B, EC, 48, 89, 4D, 30, 89, 55, 3C, 4C, 89, 45, 40, 90, 48, 8D, 4D, 48, 48, 8D, 15, 26, 80, FF, FF, 4C, 8B, 45, 30, 44, 8B, 4D, 3C, 48, 8B, 45, 40, 48, 89, 44, 24, 20, E8, B8, F5, F8, FF, E8, 03, 9D, F8, FF, C7, 85, 8C, 00, 00, 00, 01, 00, 00, 00, EB, 17, 90, 90, E8, 30, 9F, F8, FF, 85, C0, 0F, 94, C0, 48, 0F, B6, C0, 89, 85, 8C, 00, 00, 00, 90, 8B, 85, 8C, 00, 00, 00, 48, 8D, A5, 90, 00, 00, 00, 5D, C3, 90, 48, 83, EC, 28, E8, 97, 93, F8, FF, 48, 83, C4, 28, C3, CC, CC... 
[+]

Code size:

510 KB (522,240 bytes)

Approved Shell Extension

Name:

EncryptionMenu

CLSID:

{08BD6603-BACF-4529-9E13-C1BD85326D05}

CLSID name:

Context Menu Shell Extension

The file contextmenu_64.dll has been discovered within the following programs.

Advanced Folder Encryption by Kakasoft, Inc.

www.kakasoft.com

About 2% of users remove it

Scan contextmenu_64.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.