home

CryptExt.dll

Crypto Shell Extensions

Microsoft Corporation

It is included with Windows XP (SP2).
Publisher:
Microsoft Corporation

Product:
Microsoft® Windows® Operating System

Description:
Crypto Shell Extensions

 
Part of the Windows XP (Service Pack 2) Operating System

Version:
5.131.2600.2180 (xpsp_sp2_rtm.040803-2158)

MD5:
a6419ee5ffc57b40d52bfaf995d4faa3

SHA-1:
e1132144bc4a8c525fca3efe7ace4ee020de6a32

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/26/2024 7:46:58 PM UTC  (today)

File size:
52.5 KB (53,760 bytes)

Product version:
5.131.2600.2180

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
CryptExt.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Windows\System32\cryptext.dll

Registration
CLSIDs:
{7444C717-39BF-11D1-8CD9-00C04FC29D45}, {7444C719-39BF-11D1-8CD9-00C04FC29D45}

ProgIDs:
CryptPKO.CryptPKO.1, CryptSig.CryptSig.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
8/4/2004 3:56:03 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
768:fjLStEASb3L5ywcDXkfJzsWvpU7cr/cXGTs:rLdrADXkRnpU7q0XGTs

Entry address:
0x8619

Entry point:
8B, FF, 55, 8B, EC, 53, 8B, 5D, 08, 56, 8B, 75, 0C, 85, F6, 57, 8B, 7D, 10, 75, 09, 83, 3D, DC, B7, C2, 6D, 00, EB, 26, 83, FE, 01, 74, 05, 83, FE, 02, 75, 22, A1, 08, B8, C2, 6D, 85, C0, 74, 09, 57, 56, 53, FF, D0, 85, C0, 74, 0C, 57, 56, 53, E8, 07, FF, FF, FF, 85, C0, 75, 04, 33, C0, EB, 4E, 57, 56, 53, E8, 6C, AB, FF, FF, 83, FE, 01, 89, 45, 0C, 75, 0C, 85, C0, 75, 37, 57, 50, 53, E8, E3, FE, FF, FF, 85, F6, 74, 05, 83, FE, 03, 75, 26, 57, 56, 53, E8, D2, FE, FF, FF, 85, C0, 75, 03, 21, 45, 0C, 83, 7D...
 
[+]

Entropy:
5.8820

Code size:
38.5 KB (39,424 bytes)

2 Approved Shell Extensions
Name:
Crypto PKO Extension

CLSID:
{7444C717-39BF-11D1-8CD9-00C04FC29D45}

CLSID name:
CryptPKO Class

Name:
Crypto Sign Extension

CLSID:
{7444C719-39BF-11D1-8CD9-00C04FC29D45}

CLSID name:
CryptSig Class


3 Shell Open Commands
Open type:
CATFile

Command:
rundll32.exe cryptext.dll,cryptextopencat %1

Open type:
CERFile

Command:
rundll32.exe cryptext.dll,cryptextopencer %1

Open type:
STLFile

Command:
rundll32.exe cryptext.dll,cryptextopenctl %1


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.