Should I block it?

No, this file is 100% safe to run.

Additional versions

d9c6f	50.00%
be139	50.00%

(Note, Avira Operations GmbH & Co. KG publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegQueryValueExW, RegOpenKeyExW, RegCloseKey

kernel32.dll

GetModuleFileNameW, CopyFileW, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, InterlockedCompareExchange, Sleep, InterlockedExchange, DecodePointer, EncodePointer

mscoree.dll

DllMain

msvcr100.dll

DllMain

Export table

CreateShadowCopy

GetOeSystrayProcessId

GetServiceToken

avira.oe.extapi.dll

By Avira Operations GmbH & Co. KG (Signed)

Remove avira.oe.extapi.dll

MD5:	d9c6f415dd7baa94cf3e71ed1473e6e1
SHA1:	68163c88ef0eab3170cd167bd24918fe27c2d7ee

Overview

avira.oe.extapi.dll is loaded as dynamic link library that runs in the context of a process. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Avira Operations GmbH & Co. KG which was issued by the VeriSign certificate authority (CA).

Details

File name:	avira.oe.extapi.dll
Typical file path:	C:\Dokumente und Einstellungen\Eric Schinzel\Lokale Einstellungen\Temp\avgnt.exe\avira.oe.extapi.dll
Size:	38.55 KB (39,480 bytes)
Build date:	1/29/2014 1:02 PM
Certificate
Issued to:	Avira Operations GmbH & Co. KG
Authority (CA):	VeriSign
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No