home

pashlext64.dll

ConeXware, Inc

It is registered as a context menu handler (displays a menu when right-clicked in Explorer) named “PowerArchiver64”. This is installed with multiple programs including PowerArchiver 2012 and PowerArchiver 2013.
Publisher:
ConeXware, Inc  (signed and verified)

Version:
14.0.6.1

MD5:
670fbfb2285d77b9e3afeb81f2dd96b0

SHA-1:
429caf4e6c85f4253fffe30927b9c84e96d5ac4d

SHA-256:
ebbce4318171cdbb87cb6f2752749a07d750bbf27c433c899ae96e861783f2b3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 7:50:54 PM UTC  (today)

File size:
2.3 MB (2,381,696 bytes)

Product version:
1.0.0.0

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Program Files\powerarchiver\pashlext64.dll

Digital Signature
Signed by:
ConeXware, Inc

Authority:
VeriSign, Inc.

Valid from:
10/15/2012 3:00:00 AM

Valid to:
10/16/2013 2:59:59 AM

Subject:
CN="ConeXware, Inc", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="ConeXware, Inc", L=Reston, S=Virginia, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
68E71A93F1F3AE8E6DEBF4D03A5ED262

Registration
CLSIDs:
{D03D3E78-0C44-3D45-B15F-BCFD8A8B4C7E}, {d03d3e79-0c44-3d45-b15f-bcfd8a8b4c7e}, {d03d3e7A-0c44-3d45-b15f-bcfd8a8b4c7e}

COM registered:
Yes

File PE Metadata
Compilation timestamp:
8/5/2013 11:37:45 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:EVvq3gK4ZqYXjG3gdBtSGXU1GTHC/Bop9RLHeJ4hN9JhikrUkzjfiU6q:MhKvYTG3gdjSUTHC/BopXeChR6C

Entry address:
0x1E2210

Entry point:
55, 48, 83, C4, 80, 48, 8B, EC, 48, C7, 45, 30, 00, 00, 00, 00, 48, 89, 8D, 90, 00, 00, 00, 89, 95, 98, 00, 00, 00, 4C, 89, 85, A0, 00, 00, 00, 90, 48, 8D, 4D, 38, 48, 8D, 15, 10, 47, FF, FF, 4C, 8B, 85, 90, 00, 00, 00, 44, 8B, 8D, 98, 00, 00, 00, 48, 8B, 85, A0, 00, 00, 00, 48, 89, 44, 24, 20, E8, 01, 0C, E3, FF, 90, 48, 8B, 05, E1, 85, 02, 00, 48, 8B, 0D, FA, DA, 02, 00, 48, 89, 08, C7, 05, 9D, 66, 0F, 00, 94, 00, 00, 00, 48, 8D, 0D, 96, 66, 0F, 00, E8, 29, 5B, E3, FF, 48, 8B, 05, 82, 7F, 02, 00, 83, 3D...
 
[+]

Entropy:
5.9685

Code size:
1.9 MB (1,971,200 bytes)

Context Menu Handler
Display name:
PowerArchiver64

CLSID:
{d03d3e78-0c44-3d45-b15f-bcfd8a8b4c7e}

CLSID name:
PowerArchiver Shell Extensions


The file pashlext64.dll has been discovered within the following programs.

PowerArchiver 2012  by ConeXware, Inc.
Publisher's description - “PowerArchiver is an award-winning archive utility that provides support for most compressed and encoded files, as well as access to many powerful features and tools through an easy-to-use interface that seamlessly integrates with Windows Explorer.”
www.powerarchiver.com
About 3% of users remove it
PowerArchiver 2013  by ConeXware, Inc.
Publisher's description - “PowerArchiver is a professional compression utility, easy to use and filled with features. PowerArchiver offers superior ZIP and ZIPX format support compared to other archivers. It is only zipper that is fully compatible with WinZip and SecureZip.”
About 3% of users remove it
 
Powered by Should I Remove It?

Scan pashlext64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.