» RarExt.dll
Overview
Analysis
File Details
Behaviors (1)

RarExt.dll

WinRAR

win.rar GmbH

This is the Windows Shell Extension for WinRAR which provides the full RAR and ZIP file support, can decompress CAB, GZIP, ACE and other archive formats.

File name:

RarExt.dll

Publisher:

Alexander Roshal (signed by win.rar GmbH)

Product:

WinRAR

Description:

WinRAR shell extension

Version:

5.40.0

MD5:

2d434a3692b891013a2815d6cd182f9c

SHA-1:

63d45075363afb60fb5fac166ff54399e93ec5f4

SHA-256:

22159a01e9bd954a1ab825a752728d7817a957f6f343d01c6ded4a0dde54ae19

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/23/2024 5:16:43 AM UTC (today)

File size:

359.4 KB (368,016 bytes)

Product version:

5.40.0

Original file name:

RarExt.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\winrar\rarext.dll

Digital Signature

Signed by:

win.rar GmbH

Authority:

COMODO CA Limited

Valid from:

6/1/2015 2:00:00 AM

Valid to:

6/1/2017 1:59:59 AM

Subject:

CN=win.rar GmbH, O=win.rar GmbH, STREET=Marienstrasse 12, L=Berlin, S=Berlin, PostalCode=10117, C=DE

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00FE46A10AD94269C3DD225C13645352E4

File PE Metadata

Compilation timestamp:

8/14/2016 9:15:30 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

14.0

Entry address:

0x2CB13

Entry point:

55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, EE, 03, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 9E, FE, FF, FF, 83, C4, 0C, 5D, C2, 0C, 00, E9, EC, 4E, 00, 00, 83, 61, 04, 00, 8B, C1, 83, 61, 08, 00, C7, 41, 04, 04, 51, 04, 10, C7, 01, 28, 61, 04, 10, C3, 55, 8B, EC, 56, FF, 75, 08, 8B, F1, E8, 08, D3, FE, FF, C7, 06, 34, 61, 04, 10, 8B, C6, 5E, 5D, C2, 04, 00, 83, 61, 04, 00, 8B, C1, 83, 61, 08, 00, C7, 41, 04, 3C, 61, 04, 10, C7, 01, 34, 61, 04, 10, C3, 8D, 41, 04, C7, 01, 1C, 61, 04, 10, 50, E8, E1, 41... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

266 KB (272,384 bytes)

Approved Shell Extension

Name:

WinRAR shell extension

CLSID:

{B41DB860-8EE4-11D2-9906-E49FADC173CA}

CLSID name:

WinRAR

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.