home

RenManShExt.dll

RenameMan

Mark Williams

It is registered as a context menu handler (displays a menu when right-clicked in Explorer) named “RenManShExt”.
Publisher:
ExtraBit Software  (signed by Mark Williams)

Product:
RenameMan

Description:
RenManShExt Module

Version:
4, 2, 1, 0

MD5:
463054e416ae1bcdb615409be1219032

SHA-1:
b73451b4a124f99173856c0da1d8816a9f8ca787

SHA-256:
0b99dcb343bcb43cedd1785961698db88884062a85fdcc5ae57acdd812b758fa

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 3:16:32 AM UTC  (today)

File size:
195.1 KB (199,744 bytes)

Product version:
4, 2, 1, 0

Copyright:
Copyright 2013 ExtraBit Software. All rights reserved.

Original file name:
RenManShExt.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\renameman\renmanshext.dll

Digital Signature
Signed by:
Mark Williams

Authority:
COMODO CA Limited

Valid from:
1/1/2013 4:00:00 PM

Valid to:
1/2/2018 3:59:59 PM

Subject:
CN=Mark Williams, O=Mark Williams, STREET=14 Pennard Road, STREET=Kittle, L=Swansea, S=West Glamorgan, PostalCode=SA3 3JG, C=GB

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
1F9FF07DDA861DF580D3A608F2A6ECDD

File PE Metadata
Compilation timestamp:
1/10/2013 2:50:47 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3072:BM7LaF7XrKQ5uJbb9g5F7DonPTHpmWKNz0IJ6PuGsiSo3FX/9YTBkS2SPtVDbqzy:BM7LaFzrCbYGtmrz0IJ6m7irJmTBLlX3

Entry address:
0xFAFE

Entry point:
83, 7C, 24, 08, 01, 75, 05, E8, 1E, 6A, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 6A, 0A, 6A, 00, FF, 74, 24, 0C, E8, 7A, 6F, 00, 00, 83, C4, 0C, C3, 6A, 0C, 68, 78, 52, 02, 10, E8, B0, 07, 00, 00, 33, F6, 89, 75, E4, 33, C0, 8B, 5D, 08, 3B, DE, 0F, 95, C0, 3B, C6, 75, 1C, E8, 56, 22, 00, 00, C7, 00, 16, 00, 00, 00, 56, 56, 56, 56, 56, E8, 1A, F3, FF, FF, 83, C4, 14, 33, C0, EB, 7B, 33, C0, 8B, 7D, 0C, 3B, FE, 0F, 95, C0, 3B, C6, 74, D6, 33, C0, 66, 39, 37...
 
[+]

Entropy:
6.4258

Code size:
128 KB (131,072 bytes)

Context Menu Handler
Display name:
RenManShExt

CLSID:
{15947EE7-5E08-466E-B9AE-C48781808BCE}

CLSID name:
RenMan Class


Scan RenManShExt.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.