» renmanshext64.dll
Overview
Analysis
File Details

renmanshext64.dll

RenameMan

Mark Williams

File name:

renmanshext64.dll

Publisher:

ExtraBit Software (signed by Mark Williams)

Product:

RenameMan

Description:

RenManShExt Module

Version:

4, 2, 1, 0

MD5:

4d12977afe8758c425a1596d467dc392

SHA-1:

21b9d6d8cd0cf9d6763774dd7a810e87d086822c

SHA-256:

f79a07111f2d06a9840a0d390ead653a50f88bb8c0928ac4c66d8ded5b770e4f

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 3:33:03 AM UTC (today)

File size:

266.6 KB (272,960 bytes)

Product version:

4, 2, 1, 0

Original file name:

RenManShExt.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\renameman\renmanshext64.dll

Digital Signature

Signed by:

Mark Williams

Authority:

COMODO CA Limited

Valid from:

1/1/2013 4:00:00 PM

Valid to:

1/2/2018 3:59:59 PM

Subject:

CN=Mark Williams, O=Mark Williams, STREET=14 Pennard Road, STREET=Kittle, L=Swansea, S=West Glamorgan, PostalCode=SA3 3JG, C=GB

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

1F9FF07DDA861DF580D3A608F2A6ECDD

Registration

CLSID:

{15947EE7-5E08-466E-B9AE-C48781808BCE}

ProgID:

RenManShExt.RenMan.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

1/10/2013 2:50:50 PM

OS version:

4.0

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

6144:rEcBVG7D3blBxtWQ0VpJPqEkZF95gA/YrflMxxOZX:rfP+bVUQQPSE7rfnZX

Entry address:

0x192C0

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 83, FA, 01, 49, 8B, F8, 8B, DA, 48, 8B, F1, 75, 05, E8, CF, 82, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 83, FE, FF, FF, CC, CC, CC, 33, D2, 44, 8D, 42, 0A, E9, E5, 8C, 00, 00, CC, CC, CC, CC, CC, 48, 89, 5C, 24, 10, 48, 89, 74, 24, 18, 48, 89, 7C, 24, 20, 41, 54, 48, 83, EC, 40, 48, 89, 64, 24, 30, 45, 8B, E0, 48, 8B, FA, 48, 8B, F1, 33, DB, 8B, C3, 48, 85, C9, 0F, 95, C0, 85, C0, 75... 
[+]

Entropy:

6.1912

Code size:

180 KB (184,320 bytes)

Scan renmanshext64.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.