filenameRarExt.dll
size167936 (0x29000)
md5b2764e34dd2d5dab113c2af3f7315fa9
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
150204134
1493072924
13130729140
1473072915
10214
1323072986
146307291
148307291
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x4fd34d82
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion9.0
SizeOfCode0x1c600
SizeOfInitializedData0xc600
SizeOfUninitializedData0
AddressOfEntryPoint0x104e8
BaseOfCode0x1000
BaseOfData0x1e000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x36000
SizeOfHeaders0x400
CheckSum0x2d425
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x1c4ee0x1c600R-X CODE
.rdata0x1e0000x4ba90x4c00R-- IDATA
.data0x230000xb8b80x1600RW- IDATA
.rsrc0x2f0000x3f280x4000R-- IDATA
.reloc0x330000x23ea0x2400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x22b400x69
IMPORT0x21bec0xa0
RESOURCE0x2f0000x3f28
EXCEPTION00
SECURITY00
BASERELOC0x330000x1478
DEBUG0x1e3100x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x20bd80x40
Bound_IAT00
IAT0x1e0000x2c0
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAP#410012721252
ICON#113841252
ICON#222161252
ICON#32961252
ICON#47441252
ICON#516401252
ICON#637521252
DIALOGEXTARCINFODLG12421252
DIALOGEXTCMTARCINFODLG821252
STRING#2577441252
STRING#2584221252
STRING#2591741252
GROUP_ICON#4100901252
VERSION#17841252
MANIFEST#23461252
idlangstring
41001033Extr&act files...
41011033&Extract to %s
41021033E&xtract Here
41031033Extract each archive to &separate folder
41041033Extract files. Additional options are allowed
41051033Extract files to the specified folder
41061033Extract files to the current folder
41071033Extract each selected archive to separate folder
41081033&Add to archive...
41091033Add files to an archive. Additional options are allowed
41101033Add &to %s
41111033Add files to the archive
41121033Open with &WinRAR
41131033Open SFX archive in WinRAR
41141033Archive
41151033Comment
41161033Unknown
41171033solid
41181033SFX
41191033%s volume
41201033%s archive
41211033%d KB
41221033Present
41231033Absent
41241033Compress to %s and email
41251033Compress and email...
41261033Test arch&ive
41271033Check the archive for errors
41281033Convert archive...
41291033Add files to an archive using the compression profile
module_namehintordfunction_name
COMCTL32.dll49DestroyPropertySheetPage
COMCTL32.dll9CreatePropertySheetPageW
COMCTL32.dll8
KERNEL32.dll214DeleteFileW
KERNEL32.dll211DeleteFileA
KERNEL32.dll129CreateDirectoryW
KERNEL32.dll676GetVersionExW
KERNEL32.dll504GetFullPathNameA
KERNEL32.dll507GetFullPathNameW
KERNEL32.dll531GetModuleFileNameA
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll518GetLocaleInfoW
KERNEL32.dll563GetNumberFormatW
KERNEL32.dll285ExpandEnvironmentStringsW
KERNEL32.dll1273WaitForSingleObject
KERNEL32.dll467GetDriveTypeW
KERNEL32.dll334FindResourceW
KERNEL32.dll830LoadLibraryExW
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll97CompareStringA
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll1202Sleep
KERNEL32.dll1213SystemTimeToFileTime
KERNEL32.dll293FileTimeToSystemTime
KERNEL32.dll631GetSystemTime
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll100CompareStringW
KERNEL32.dll766IsDBCSLeadByte
KERNEL32.dll370GetCPInfo
KERNEL32.dll514GetLastError
KERNEL32.dll516GetLocaleInfoA
KERNEL32.dll617GetStringTypeW
KERNEL32.dll614GetStringTypeA
KERNEL32.dll1316WriteConsoleW
KERNEL32.dll432GetConsoleOutputCP
KERNEL32.dll1306WriteConsoleA
KERNEL32.dll828LoadLibraryA
KERNEL32.dll659GetTickCount
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll474GetEnvironmentStringsW
KERNEL32.dll353FreeEnvironmentStringsW
KERNEL32.dll472GetEnvironmentStrings
KERNEL32.dll352FreeEnvironmentStringsA
KERNEL32.dll813LCMapStringW
KERNEL32.dll811LCMapStringA
KERNEL32.dll778IsValidCodePage
KERNEL32.dll567GetOEMCP
KERNEL32.dll360GetACP
KERNEL32.dll533GetModuleHandleA
KERNEL32.dll428GetConsoleMode
KERNEL32.dll410GetConsoleCP
KERNEL32.dll724HeapSize
KERNEL32.dll739InitializeCriticalSectionAndSpinCount
KERNEL32.dll610GetStartupInfoA
KERNEL32.dll1135SetHandleCount
KERNEL32.dll281ExitProcess
KERNEL32.dll718HeapDestroy
KERNEL32.dll717HeapCreate
KERNEL32.dll1257VirtualAlloc
KERNEL32.dll490GetFileAttributesW
KERNEL32.dll485GetFileAttributesA
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll1317WriteFile
KERNEL32.dll1139SetLastError
KERNEL32.dll612GetStdHandle
KERNEL32.dll960ReadFile
KERNEL32.dll143CreateFileW
KERNEL32.dll136CreateFileA
KERNEL32.dll499GetFileType
KERNEL32.dll1126SetFilePointer
KERNEL32.dll343FlushFileBuffers
KERNEL32.dll82CloseHandle
KERNEL32.dll313FindFirstFileW
KERNEL32.dll325FindNextFileW
KERNEL32.dll302FindClose
KERNEL32.dll228DosDateTimeToFileTime
KERNEL32.dll838LocalFileTimeToFileTime
KERNEL32.dll831LoadLibraryW
KERNEL32.dll581GetProcAddress
KERNEL32.dll354FreeLibrary
KERNEL32.dll292FileTimeToLocalFileTime
KERNEL32.dll291FileTimeToDosDateTime
KERNEL32.dll645GetTempPathW
KERNEL32.dll1260VirtualFree
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll1216TerminateProcess
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll1222TlsFree
KERNEL32.dll1048RtlUnwind
KERNEL32.dll715HeapAlloc
KERNEL32.dll719HeapFree
KERNEL32.dll722HeapReAlloc
KERNEL32.dll945RaiseException
KERNEL32.dll1159SetStdHandle
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll390GetCommandLineA
KERNEL32.dll1223TlsGetValue
KERNEL32.dll1221TlsAlloc
KERNEL32.dll1224TlsSetValue
USER32.dll545OemToCharA
USER32.dll406GetWindowLongW
USER32.dll60CharUpperW
USER32.dll46CharLowerW
USER32.dll57CharUpperA
USER32.dll43CharLowerA
USER32.dll506LoadStringW
USER32.dll412GetWindowRect
USER32.dll710SetWindowPos
USER32.dll419GetWindowTextW
USER32.dll382GetSystemMetrics
USER32.dll398GetWindow
USER32.dll274GetClassNameW
USER32.dll53CharToOemA
USER32.dll715SetWindowTextW
USER32.dll107CreatePopupMenu
USER32.dll441InsertMenuItemW
USER32.dll379GetSysColor
USER32.dll495LoadImageW
USER32.dll627SendDlgItemMessageW
USER32.dll656SetDlgItemTextW
USER32.dll708SetWindowLongW
USER32.dll298GetDlgItemTextW
USER32.dll276GetClientRect
USER32.dll14BeginPaint
USER32.dll220EndPaint
USER32.dll674SetMenuItemInfoW
USER32.dll356GetParent
USER32.dll446InvalidateRect
USER32.dll289GetDC
USER32.dll636SendMessageW
USER32.dll613ReleaseDC
USER32.dll735ShowWindow
USER32.dll295GetDlgItem
GDI32.dll509GetObjectW
GDI32.dll48CreateCompatibleDC
GDI32.dll516GetPixel
GDI32.dll667SetPixel
GDI32.dll227DeleteDC
GDI32.dll53CreateDIBSection
GDI32.dll75CreatePen
GDI32.dll84CreateSolidBrush
GDI32.dll678SetTextColor
GDI32.dll697TextOutW
GDI32.dll598Polygon
GDI32.dll599Polyline
GDI32.dll230DeleteObject
GDI32.dll631SelectObject
GDI32.dll548GetTextFaceW
GDI32.dll550GetTextMetricsW
GDI32.dll65CreateFontW
GDI32.dll459GetDeviceCaps
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll638RegSetValueExW
ADVAPI32.dll569RegCreateKeyExW
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll560RegCloseKey
SHELL32.dll31DragQueryFileW
SHELL32.dll289ShellExecuteExW
SHELL32.dll215SHGetPathFromIDListW
ole32.dll16CoCreateInstance
ole32.dll344ReleaseStgMedium
ordentry_vafunction_name
10x7a52DllCanUnloadNow
20x9999DllGetClassObject
module_namerarext.dll
flags0
timestamp2012-06-09 13:20:02
version0.0
ordinal_base1
nFunctions2
nNames2
Names(2)0x22b70
Functions(2)0x22b68
NameOrdinals(2)0x22b78

StringTable 040904E4

ProductNameWinRAR
CompanyNameAlexander Roshal
FileDescriptionWinRAR shell extension
FileVersion4.20.0
ProductVersion4.20.0
InternalNameWinRAR shell extension
LegalCopyrightCopyright © Alexander Roshal 1993-2012
OriginalFilenameRarExt.dll

VS_FIXEDFILEINFO

FileVersion4.20.0.0
ProductVersion4.20.0.0
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
0167936DLL06/09/2012 13:20:02#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK