» extractmenu64.dll
Overview
Analysis
File Details
Programs (1)

extractmenu64.dll

ExtractNow Shell Menu

Nathan Moinvaziri

This is installed with ExtractNow.

File name:

extractmenu64.dll

Publisher:

Nathan Moinvaziri (signed and verified)

Product:

ExtractNow Shell Menu

Version:

4,8,0,0

MD5:

f40cbe2b2be4708459b885ce2dd5b33a

SHA-1:

9ea6923240384ff53db3fba31f8f3fce5074b40f

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/29/2024 6:40:46 PM UTC (today)

File size:

242 KB (247,824 bytes)

Product version:

4,8,0,0

Original file name:

extractmenu.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\extractnow\extractmenu64.dll

Digital Signature

Signed by:

Nathan Moinvaziri

Authority:

COMODO CA Limited

Valid from:

6/1/2013 2:00:00 AM

Valid to:

6/2/2014 1:59:59 AM

Subject:

CN=Nathan Moinvaziri, O=Nathan Moinvaziri, STREET=1538 W Tuckey Ln, L=Phoenix, S=AZ, PostalCode=85015, C=US

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

3EF6B9FB16BDC6E46FBBCB61827843CF

File PE Metadata

Compilation timestamp:

8/3/2013 7:58:22 AM

OS version:

4.0

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

6144:m0Yn8zQozpgrIlJpWVdYz922L6NODr9H9a:mH8NgslJLz9icDr9c

Entry address:

0x17898

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, CB, 64, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, AB, FE, FF, FF, CC, CC, CC, 48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 63, D9, 41, 8B, F8, 48, 89, 54, 24, 38, 8B, CB, E8, A0, 66, 00, 00, 48, 83, F8, FF, 75, 11, E8, 89, 0E, 00, 00, C7, 00, 09, 00, 00, 00, 48, 83, C8, FF, EB, 57, 8B, 54, 24, 38, 4C, 8D, 44, 24, 3C, 44, 8B, CF, 48... 
[+]

Code size:

164 KB (167,936 bytes)

The file extractmenu64.dll has been discovered within the following programs.

ExtractNow by Nathan Moinvaziri

Some versions use the OpenCandy software library to bundle potentially unwanted software offers during installation.

www.extractnow.com

28% remove it

Scan extractmenu64.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.