» RContextMenu.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (2)

RContextMenu.dll

Macrium Reflect Shell Extension Context Menu

Paramount Software UK Ltd

This is installed with multiple programs including Macrium Reflect Server Plus Edition and Macrium Reflect Home Edition.

File name:

RContextMenu.dll

Publisher:

Paramount Software UK Ltd (signed and verified)

Product:

Macrium Reflect Shell Extension Context Menu

Description:

Reflect Shell Extension Context Menu

Version:

7, 0, 2079, 0

MD5:

db72b34d99fdc3c6d215fadb12130fb7

SHA-1:

fec076d3519d34fee98898084374de15c0b17604

SHA-256:

bbdf3ef996a5d35a0d03786664b44367a33f4c04813d62ce9a960c4248062aa1

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/30/2024 10:20:01 AM UTC (today)

File size:

223.2 KB (228,592 bytes)

Product version:

7, 0, 2079, 0

Original file name:

RContextMenu.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United Kingdom)

Common path:

C:\Program Files\macrium\reflect\rcontextmenu.dll

Digital Signature

Signed by:

Paramount Software UK Ltd

Authority:

GlobalSign nv-sa

Valid from:

2/16/2017 10:47:48 AM

Valid to:

3/24/2020 3:06:23 PM

Subject:

CN=Paramount Software UK Ltd, O=Paramount Software UK Ltd, L=Manchester, S=Greater Manchester, C=GB

Issuer:

CN=GlobalSign CodeSigning CA - G3, O=GlobalSign nv-sa, C=BE

Serial number:

7C4BA269A79BFCBA77F289AA

Registration

CLSID:

{DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611}

COM registered:

Yes

File PE Metadata

Compilation timestamp:

3/16/2017 1:58:42 AM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

11.0

Entry address:

0x15054

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 3F, 6E, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 03, 00, 00, 00, CC, CC, CC, 48, 8B, C4, 48, 89, 58, 20, 4C, 89, 40, 18, 89, 50, 10, 48, 89, 48, 08, 56, 57, 41, 56, 48, 83, EC, 50, 49, 8B, F0, 8B, DA, 4C, 8B, F1, BA, 01, 00, 00, 00, 89, 50, B8, 85, DB, 75, 0F, 39, 1D, 50, B3, 01, 00, 75, 07, 33, C0, E9, D2, 00, 00, 00, 8D, 43, FF... 
[+]

Entropy:

5.9761

Code size:

127 KB (130,048 bytes)

Approved Shell Extension

Name:

ReflectShellExt extension

CLSID:

{DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611}

CLSID name:

ReflectShellExt Class

The file RContextMenu.dll has been discovered within the following programs.

Macrium Reflect Home Edition by Paramount Software (UK) Ltd.

www.macrium.com/default.aspx

About 2% of users remove it

Macrium Reflect Server Plus Edition by Paramount Software (UK) Ltd.

About 4% of users remove it

Scan RContextMenu.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.