home

RenManShExt.dll

RenameMan

Mark Williams trading as ExtraBit Software

It is registered as a context menu handler (displays a menu when right-clicked in Explorer) named “RenManShExt”.
Publisher:
ExtraBit Software  (signed by Mark Williams trading as ExtraBit Software)

Product:
RenameMan

Description:
RenManShExt Module

Version:
4, 1, 1, 0

MD5:
d31870b8c623b8258511dbbb81a1c256

SHA-1:
7e5e67e72db3ef1cb76a3a9dd2a4b1d192f9dfb9

SHA-256:
01a719a5299f46a09415576403c368a4aadd6f67dd40bf82c1b6aac6d903e4d4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 3:54:57 PM UTC  (today)

File size:
180.3 KB (184,616 bytes)

Product version:
4, 1, 1, 0

Copyright:
Copyright 2010 ExtraBit Software. All rights reserved.

Original file name:
RenManShExt.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\renameman\renmanshext.dll

Digital Signature
Signed by:
Mark Williams trading as ExtraBit Software

Authority:
The USERTRUST Network

Valid from:
7/30/2008 5:00:00 PM

Valid to:
7/31/2011 4:59:59 PM

Subject:
CN=Mark Williams trading as ExtraBit Software, O=Mark Williams trading as ExtraBit Software, STREET=32 Beaufort Drive, STREET=Kittle, L=Swansea, S=West Glamorgan, PostalCode=SA3 3LD, C=GB

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00B81CCB8404E986470CD89A80CF2DADE1

File PE Metadata
Compilation timestamp:
8/4/2010 2:41:13 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3072:0wPSbc57TsIZ5TNn8LFb1iJ7iGHVNcWdVIMdsoZdatItGujb6QklG:0wqZiFAUJ7iGnVIDLut

Entry address:
0xCC28

Entry point:
83, 7C, 24, 08, 01, 75, 05, E8, 52, 6D, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 6A, 0A, 6A, 00, FF, 74, 24, 0C, E8, AE, 72, 00, 00, 83, C4, 0C, C3, 55, 8B, EC, 83, EC, 10, 8B, 4D, 08, 53, 8B, 5D, 0C, 56, 57, 33, FF, 39, 7D, 10, 89, 4D, F8, 89, 5D, FC, 74, 21, 39, 7D, 14, 74, 1C, 3B, CF, 75, 1F, E8, C6, 23, 00, 00, 57, 57, 57, 57, C7, 00, 16, 00, 00, 00, 57, E8, 69, F8, FF, FF, 83, C4, 14, 33, C0, 5F, 5E, 5B, C9, C3, 8B, 75, 18, 3B, F7, 74, 0D, 83, C8, FF...
 
[+]

Entropy:
6.3446

Code size:
120 KB (122,880 bytes)

Context Menu Handler
Display name:
RenManShExt

CLSID:
{15947EE7-5E08-466E-B9AE-C48781808BCE}

CLSID name:
RenMan Class


Scan RenManShExt.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.