home

pashlext.dll

ConeXware, Inc

It is registered as a context menu handler (displays a menu when right-clicked in Explorer) named “PowerArchiver”. This is installed with multiple programs including PowerArchiver 2012 and PowerArchiver 2013.
Publisher:
ConeXware, Inc  (signed and verified)

Version:
14.0.6.1

MD5:
05cc80e6a5c0757339ce8006139fc554

SHA-1:
491ed51c36e66e9542740f7b1a76e1e584add627

SHA-256:
d8e77f1669e191a2addbbd4a9565bb753e21b58f30e9c01e4421b649c88de9f8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 8:00:01 AM UTC  (today)

File size:
1.4 MB (1,493,888 bytes)

Product version:
1.0.0.0

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\powerarchiver\pashlext.dll

Digital Signature
Signed by:
ConeXware, Inc

Authority:
VeriSign, Inc.

Valid from:
10/15/2012 3:00:00 AM

Valid to:
10/16/2013 2:59:59 AM

Subject:
CN="ConeXware, Inc", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="ConeXware, Inc", L=Reston, S=Virginia, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
68E71A93F1F3AE8E6DEBF4D03A5ED262

Registration
CLSIDs:
{D03D3E68-0C44-3D45-B15F-BCFD8A8B4C7E}, {D03D3E69-0C44-3D45-B15F-BCFD8A8B4C7E}, {D03D3E6A-0C44-3D45-B15F-BCFD8A8B4C7E}

COM registered:
Yes

File PE Metadata
Compilation timestamp:
8/5/2013 11:53:30 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:bBBq5Nz3sO/tS2VXyJZ77Qv2LBYS657N5/2D5l4Z1jJBdECYg:bb03y1LSSqJ5/f1VB6Cj

Entry address:
0x13F4B4

Entry point:
55, 8B, EC, 83, C4, BC, 33, C0, 89, 45, BC, B8, 70, 7E, 53, 00, E8, F3, CE, EC, FF, 33, C0, 55, 68, 25, F5, 53, 00, 64, FF, 30, 64, 89, 20, A1, 54, 4C, 54, 00, 8B, 15, 50, 7C, 54, 00, 89, 10, C7, 05, 90, C5, 5A, 00, 94, 00, 00, 00, 68, 90, C5, 5A, 00, E8, 10, 03, ED, FF, 83, 3D, A0, C5, 5A, 00, 01, A1, 4C, 49, 54, 00, 0F, 94, 00, 8D, 45, BC, E8, B9, 7B, FF, FF, 33, C0, 5A, 59, 59, 64, 89, 10, 68, 2C, F5, 53, 00, 8D, 45, BC, E8, 5C, 8D, EC, FF, C3, E9, 0E, 83, EC, FF, EB, F0, E8, 7F, 8A, EC, FF, 8D, 40, 00...
 
[+]

Entropy:
6.5686

Developed / compiled with:
Microsoft Visual C++

Code size:
1.2 MB (1,303,552 bytes)

Context Menu Handler
Display name:
PowerArchiver

CLSID:
{d03d3e68-0c44-3d45-b15f-bcfd8a8b4c7e}

CLSID name:
PowerArchiver Shell Extensions


The file pashlext.dll has been discovered within the following programs.

PowerArchiver 2012  by ConeXware, Inc.
Publisher's description - “PowerArchiver is an award-winning archive utility that provides support for most compressed and encoded files, as well as access to many powerful features and tools through an easy-to-use interface that seamlessly integrates with Windows Explorer.”
www.powerarchiver.com
About 3% of users remove it
PowerArchiver 2013  by ConeXware, Inc.
Publisher's description - “PowerArchiver is a professional compression utility, easy to use and filled with features. PowerArchiver offers superior ZIP and ZIPX format support compared to other archivers. It is only zipper that is fully compatible with WinZip and SecureZip.”
About 3% of users remove it
 
Powered by Should I Remove It?

Scan pashlext.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.