filenameRarExt64.dll
size196096 (0x2fe00)
md51850daaa7e7a2e543c4a299b58ac9162
typePE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
150204134
1493072912
13130729131
135307291
1473072915
10218
1323072987
146307291
148307291
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x4fd34d85
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion9.0
SizeOfCode0x20800
SizeOfInitializedData0xf200
SizeOfUninitializedData0
AddressOfEntryPoint0x1317c
BaseOfCode0x1000
ImageBase0x180000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.2
ImageVersion0.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x3e000
SizeOfHeaders0x400
CheckSum0x3a597
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x2077a0x20800R-X CODE
.rdata0x220000x70290x7200R-- IDATA
.data0x2a0000xc8300x1c00RW- IDATA
.pdata0x370000x1a040x1c00R-- IDATA
.rsrc0x390000x3f280x4000R-- IDATA
.reloc0x3d0000x62c0x800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x28fc00x69
IMPORT0x27d3c0xa0
RESOURCE0x390000x3f28
EXCEPTION0x370000x1a04
SECURITY00
BASERELOC0x3d0000x2ec
DEBUG0x226400x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x220000x5a0
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAP#410012721252
ICON#113841252
ICON#222161252
ICON#32961252
ICON#47441252
ICON#516401252
ICON#637521252
DIALOGEXTARCINFODLG12421252
DIALOGEXTCMTARCINFODLG821252
STRING#2577441252
STRING#2584221252
STRING#2591741252
GROUP_ICON#4100901252
VERSION#17841252
MANIFEST#23461252
idlangstring
41001033Extr&act files...
41011033&Extract to %s
41021033E&xtract Here
41031033Extract each archive to &separate folder
41041033Extract files. Additional options are allowed
41051033Extract files to the specified folder
41061033Extract files to the current folder
41071033Extract each selected archive to separate folder
41081033&Add to archive...
41091033Add files to an archive. Additional options are allowed
41101033Add &to %s
41111033Add files to the archive
41121033Open with &WinRAR
41131033Open SFX archive in WinRAR
41141033Archive
41151033Comment
41161033Unknown
41171033solid
41181033SFX
41191033%s volume
41201033%s archive
41211033%d KB
41221033Present
41231033Absent
41241033Compress to %s and email
41251033Compress and email...
41261033Test arch&ive
41271033Check the archive for errors
41281033Convert archive...
41291033Add files to an archive using the compression profile
module_namehintordfunction_name
COMCTL32.dll49DestroyPropertySheetPage
COMCTL32.dll9CreatePropertySheetPageW
COMCTL32.dll8
KERNEL32.dll215DeleteFileW
KERNEL32.dll212DeleteFileA
KERNEL32.dll129CreateDirectoryW
KERNEL32.dll684GetVersionExW
KERNEL32.dll511GetFullPathNameA
KERNEL32.dll514GetFullPathNameW
KERNEL32.dll537GetModuleFileNameA
KERNEL32.dll538GetModuleFileNameW
KERNEL32.dll873MultiByteToWideChar
KERNEL32.dll524GetLocaleInfoW
KERNEL32.dll570GetNumberFormatW
KERNEL32.dll291ExpandEnvironmentStringsW
KERNEL32.dll474GetDriveTypeW
KERNEL32.dll340FindResourceW
KERNEL32.dll832LoadLibraryExW
KERNEL32.dll455GetCurrentProcessId
KERNEL32.dll97CompareStringA
KERNEL32.dll454GetCurrentProcess
KERNEL32.dll1216Sleep
KERNEL32.dll1227SystemTimeToFileTime
KERNEL32.dll299FileTimeToSystemTime
KERNEL32.dll638GetSystemTime
KERNEL32.dll1312WideCharToMultiByte
KERNEL32.dll100CompareStringW
KERNEL32.dll768IsDBCSLeadByte
KERNEL32.dll376GetCPInfo
KERNEL32.dll652GetTempPathW
KERNEL32.dll349FlushFileBuffers
KERNEL32.dll522GetLocaleInfoA
KERNEL32.dll624GetStringTypeW
KERNEL32.dll621GetStringTypeA
KERNEL32.dll1331WriteConsoleW
KERNEL32.dll438GetConsoleOutputCP
KERNEL32.dll1321WriteConsoleA
KERNEL32.dll830LoadLibraryA
KERNEL32.dll666GetTickCount
KERNEL32.dll937QueryPerformanceCounter
KERNEL32.dll481GetEnvironmentStringsW
KERNEL32.dll359FreeEnvironmentStringsW
KERNEL32.dll479GetEnvironmentStrings
KERNEL32.dll358FreeEnvironmentStringsA
KERNEL32.dll815LCMapStringW
KERNEL32.dll813LCMapStringA
KERNEL32.dll780IsValidCodePage
KERNEL32.dll574GetOEMCP
KERNEL32.dll366GetACP
KERNEL32.dll434GetConsoleMode
KERNEL32.dll416GetConsoleCP
KERNEL32.dll732HeapSize
KERNEL32.dll747InitializeCriticalSectionAndSpinCount
KERNEL32.dll210DeleteCriticalSection
KERNEL32.dll617GetStartupInfoA
KERNEL32.dll1148SetHandleCount
KERNEL32.dll1048RtlCaptureContext
KERNEL32.dll1062RtlVirtualUnwind
KERNEL32.dll770IsDebuggerPresent
KERNEL32.dll1203SetUnhandledExceptionFilter
KERNEL32.dll1250UnhandledExceptionFilter
KERNEL32.dll1230TerminateProcess
KERNEL32.dll497GetFileAttributesW
KERNEL32.dll492GetFileAttributesA
KERNEL32.dll542GetModuleHandleW
KERNEL32.dll1332WriteFile
KERNEL32.dll1152SetLastError
KERNEL32.dll619GetStdHandle
KERNEL32.dll963ReadFile
KERNEL32.dll143CreateFileW
KERNEL32.dll136CreateFileA
KERNEL32.dll506GetFileType
KERNEL32.dll1140SetFilePointer
KERNEL32.dll520GetLastError
KERNEL32.dll319FindFirstFileW
KERNEL32.dll1288WaitForSingleObject
KERNEL32.dll82CloseHandle
KERNEL32.dll331FindNextFileW
KERNEL32.dll308FindClose
KERNEL32.dll232DosDateTimeToFileTime
KERNEL32.dll840LocalFileTimeToFileTime
KERNEL32.dll833LoadLibraryW
KERNEL32.dll588GetProcAddress
KERNEL32.dll360FreeLibrary
KERNEL32.dll298FileTimeToLocalFileTime
KERNEL32.dll297FileTimeToDosDateTime
KERNEL32.dll726HeapDestroy
KERNEL32.dll725HeapCreate
KERNEL32.dll731HeapSetInformation
KERNEL32.dll287ExitProcess
KERNEL32.dll344FlsAlloc
KERNEL32.dll345FlsFree
KERNEL32.dll346FlsGetValue
KERNEL32.dll203DecodePointer
KERNEL32.dll238EncodePointer
KERNEL32.dll1055RtlLookupFunctionEntry
KERNEL32.dll1061RtlUnwindEx
KERNEL32.dll723HeapAlloc
KERNEL32.dll727HeapFree
KERNEL32.dll730HeapReAlloc
KERNEL32.dll948RaiseException
KERNEL32.dll1057RtlPcToFileHeader
KERNEL32.dll1172SetStdHandle
KERNEL32.dll242EnterCriticalSection
KERNEL32.dll827LeaveCriticalSection
KERNEL32.dll640GetSystemTimeAsFileTime
KERNEL32.dll459GetCurrentThreadId
KERNEL32.dll347FlsSetValue
KERNEL32.dll396GetCommandLineA
USER32.dll549OemToCharA
USER32.dll410GetWindowLongW
USER32.dll60CharUpperW
USER32.dll46CharLowerW
USER32.dll57CharUpperA
USER32.dll43CharLowerA
USER32.dll510LoadStringW
USER32.dll416GetWindowRect
USER32.dll409GetWindowLongPtrW
USER32.dll718SetWindowPos
USER32.dll423GetWindowTextW
USER32.dll384GetSystemMetrics
USER32.dll400GetWindow
USER32.dll276GetClassNameW
USER32.dll53CharToOemA
USER32.dll716SetWindowLongW
USER32.dll723SetWindowTextW
USER32.dll107CreatePopupMenu
USER32.dll445InsertMenuItemW
USER32.dll499LoadImageW
USER32.dll381GetSysColor
USER32.dll631SendDlgItemMessageW
USER32.dll662SetDlgItemTextW
USER32.dll715SetWindowLongPtrW
USER32.dll300GetDlgItemTextW
USER32.dll278GetClientRect
USER32.dll14BeginPaint
USER32.dll220EndPaint
USER32.dll680SetMenuItemInfoW
USER32.dll358GetParent
USER32.dll450InvalidateRect
USER32.dll291GetDC
USER32.dll640SendMessageW
USER32.dll617ReleaseDC
USER32.dll743ShowWindow
USER32.dll297GetDlgItem
GDI32.dll509GetObjectW
GDI32.dll48CreateCompatibleDC
GDI32.dll516GetPixel
GDI32.dll667SetPixel
GDI32.dll227DeleteDC
GDI32.dll53CreateDIBSection
GDI32.dll75CreatePen
GDI32.dll84CreateSolidBrush
GDI32.dll678SetTextColor
GDI32.dll697TextOutW
GDI32.dll598Polygon
GDI32.dll599Polyline
GDI32.dll230DeleteObject
GDI32.dll631SelectObject
GDI32.dll548GetTextFaceW
GDI32.dll550GetTextMetricsW
GDI32.dll65CreateFontW
GDI32.dll459GetDeviceCaps
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll638RegSetValueExW
ADVAPI32.dll569RegCreateKeyExW
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll560RegCloseKey
SHELL32.dll215SHGetPathFromIDListW
SHELL32.dll31DragQueryFileW
SHELL32.dll289ShellExecuteExW
ole32.dll20CoCreateInstance
ole32.dll396ReleaseStgMedium
ordentry_vafunction_name
10x922cDllCanUnloadNow
20xb860DllGetClassObject
module_namerarext.dll
flags0
timestamp2012-06-09 13:20:05
version0.0
ordinal_base1
nFunctions2
nNames2
Names(2)0x28ff0
Functions(2)0x28fe8
NameOrdinals(2)0x28ff8

StringTable 040904E4

ProductNameWinRAR
CompanyNameAlexander Roshal
FileDescriptionWinRAR shell extension
FileVersion4.20.0
ProductVersion4.20.0
InternalNameWinRAR shell extension
LegalCopyrightCopyright © Alexander Roshal 1993-2012
OriginalFilenameRarExt.dll

VS_FIXEDFILEINFO

FileVersion4.20.0.0
ProductVersion4.20.0.0
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d0190512BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK