home

ztvunrar38.dll

RAR decompression library

Alexander Roshal

Publisher:
Alexander Roshal

Product:
RAR decompression library

Version:
3.80

MD5:
b552265ec654531354e18681f02e1498

SHA-1:
74352ed2c5c6acc89ab0b5a92e60896c1a07221a

SHA-256:
981e6164c9941bcbfff4ca658a661f90c286c280ede4838b5ba0f6df995c94a6

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
5/11/2025 11:01:04 AM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
Heur.Packed.Unknown
17459

File size:
165 KB (168,960 bytes)

Original file name:
Unrar.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
6/15/2008 2:40:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
5.0

CTPH (ssdeep):
3072:iQmS0/9eo0uBwDl8bZ5JOGz7jcNq1F92bBWhOSWkSIZAz2LihrbyagUn:iQV0/9eoA8bNOsINq+oSIZs2L0rbyal

Entry address:
0x1000

Entry point:
E9, 13, 28, 02, 00, 43, 2B, 2B, 48, 4F, 4F, 4B, 90, E9, 24, 42, 42, 00, A1, 4B, 41, 42, 00, C1, E0, 02, A3, 4F, 41, 42, 00, 8B, 44, 24, 08, A3, 1D, 42, 42, 00, FF, 14, 85, 0D, 42, 42, 00, 83, 3D, 1D, 42, 42, 00, 01, 75, 5E, 80, 3D, B7, 41, 42, 00, 00, 74, 24, E8, C6, 26, 02, 00, BA, B8, 41, 42, 00, 25, 00, 00, 00, 80, 74, 05, BA, D8, 41, 42, 00, 52, E8, C3, FF, 01, 00, 58, 33, C0, E9, 8F, 00, 00, 00, FE, 05, B7, 41, 42, 00, 83, 3D, 1D, 42, 42, 00, 01, 75, 1A, E8, 8B, 0D, 02, 00, 52, 8B, 54, 24, 08, E8, 4D...
 
[+]

Code size:
140 KB (143,360 bytes)

The file ztvunrar38.dll has been discovered within the following program.

NewsLeecher v5.0 Beta 3  by Crystal Art Software
Publisher's description - “NewsLeecher is a Usenet downloading (leeching) application. It downloads movies, pictures, MP3 files, and software applications, and uses it's inline engine to assemble and decode all the downloads.”
About 4% of users remove it
 
Powered by Should I Remove It?

Scan ztvunrar38.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.