home

RarExt.dll

WinRAR

win.rar GmbH

This is the Windows Shell Extension for WinRAR which provides the full RAR and ZIP file support, can decompress CAB, GZIP, ACE and other archive formats. This is installed with WinRAR 5.21 (32-bit).
Publisher:
Alexander Roshal  (signed by win.rar GmbH)

Product:
WinRAR

Description:
WinRAR shell extension

Version:
5.21.0

MD5:
74ec17de14e568a4404faf3abda68ee4

SHA-1:
83d7cf6d788d39edd706a2481161375eecf79089

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 9:59:08 AM UTC  (today)

File size:
267 KB (273,360 bytes)

Product version:
5.21.0

Copyright:
Copyright © Alexander Roshal 1993-2015

Original file name:
RarExt.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\winrar\rarext.dll

Digital Signature
Signed by:
win.rar GmbH

Authority:
COMODO CA Limited

Valid from:
6/13/2013 2:00:00 AM

Valid to:
6/14/2015 1:59:59 AM

Subject:
CN=win.rar GmbH, O=win.rar GmbH, STREET=Schumannstr. 17, L=Berlin, S=Berlin, PostalCode=10117, C=DE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
75953FA54DD12DD9CA6B948C17BFD67C

Registration
CLSID:
{B41DB860-8EE4-11D2-9906-E49FADC173CA}

COM registered:
Yes

File PE Metadata
Compilation timestamp:
2/15/2015 9:00:51 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:H3nakvNl43XEtXSeizejl2AUbQncvAXGXp:H3nakv4He2ul2AUbQncvvp

Entry address:
0x247B1

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 8C, 81, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 51, 56, 8B, 75, 0C, 56, E8, AD, 48, 00, 00, 89, 45, 0C, 8B, 46, 0C, 59, A8, 82, 75, 17, E8, E3, 02, 00, 00, C7, 00, 09, 00, 00, 00, 83, 4E, 0C, 20, 83, C8, FF, E9, 2F, 01, 00, 00, A8, 40, 74, 0D, E8, C8, 02, 00, 00, C7, 00, 22, 00, 00, 00, EB, E3, 53, 33, DB, A8, 01, 74, 16, 89, 5E, 04, A8, 10, 0F, 84, 87, 00, 00, 00, 8B, 4E, 08, 83, E0, FE, 89, 0E...
 
[+]

Code size:
200 KB (204,800 bytes)

Approved Shell Extension
Name:
WinRAR shell extension

CLSID:
{B41DB860-8EE4-11D2-9906-E49FADC173CA}

CLSID name:
WinRAR


The file RarExt.dll has been discovered within the following program.

WinRAR 5.21 (32-bit)  by win.rar GmbH
www.rarlab.com
6% remove it
 
Powered by Should I Remove It?

The file RarExt.dll has been seen being distributed by the following URL.

ftp://ftp.akzo.sonda.com.uy/Soporte/.../RarExt.dll

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.