Should I block it?

76%

76% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

2.0.0.586	19.44%
2.0.0.583	8.33%
2.0.0.574	2.78%
2.0.0.566	16.67%
2.0.0.566	5.56%
2.0.0.557	2.78%
2.0.0.462	2.78%
2.0.0.444	2.78%
2.0.0.428	2.78%
2.0.0.427	2.78%
2.0.0.426	2.78%
2.0.0.426	22.22%
2.0.0.415	2.78%
2.0.0.412	2.78%
2.0.0.410	2.78%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

GetSidIdentifierAuthority, RegQueryValueExW, GetSidSubAuthorityCount, GetSidSubAuthority, RegEnumKeyExW, RegQueryInfoKeyW, RegDeleteValueW, RegDeleteKeyW, RegCreateKeyW, RegEnumValueW, RegSetValueExW, OpenProcessToken, GetTokenInformation, RegCreateKeyExW, RegOpenKeyExW, RegCloseKey, IsValidSid, ConvertSidToStringSidW, RegGetKeySecurity, InitializeSecurityDescriptor, InitializeAcl, AddAce, SetSecurityDescriptorDacl, RegSetKeySecurity, GetLengthSid, CopySid

kernel32.dll

LeaveCriticalSection, GetLastError, GetProcAddress, GetModuleHandleW, lstrcmpiW, GetModuleFileNameW, FreeLibrary, MultiByteToWideChar, EnterCriticalSection, SetThreadLocale, GetThreadLocale, GetVersionExW, CloseHandle, LocalAlloc, CreateFileA, SetEndOfFile, lstrlenW, InterlockedDecrement, InterlockedIncrement, DisableThreadLibraryCalls, DeleteCriticalSection, InitializeCriticalSection, RaiseException, LocalFree, GetProcessHeap, GetCurrentProcess, HeapAlloc, HeapFree, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, LoadLibraryExW, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, CreateFileW, FlushFileBuffers, SetStdHandle, GetLocaleInfoA, GetStringTypeW, GetStringTypeA, LCMapStringW, LCMapStringA, InitializeCriticalSectionAndSpinCount, LoadLibraryA, GetConsoleMode, GetConsoleCP, HeapDestroy, HeapReAlloc, HeapSize, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, RtlUnwind, GetCurrentThreadId, GetCommandLineA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, Sleep, ExitProcess, VirtualFree, VirtualAlloc, HeapCreate, WriteFile, GetStdHandle, GetModuleFileNameA, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, ReadFile, SetHandleCount, GetFileType, GetStartupInfoA, SetFilePointer, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime

ole32.dll

CoCreateInstance, CoTaskMemFree, StringFromGUID2, CoTaskMemRealloc, CoCreateGuid, CoTaskMemAlloc

rpcrt4.dll

UuidToStringW, RpcStringFreeW

shlwapi.dll

PathRemoveFileSpecW

user32.dll

CharNextW, MessageBoxW

Export table

DllCanUnloadNow

DllGetClassObject

DllInstall

DllRegisterServer

DllUnregisterServer

extension32.dll

By Bit Cocktail Ltd. (Signed)

Remove extension32.dll

Version:	2.0.0.566
MD5:	b5602f4db9b04e8bf14bd920ced81851
SHA1:	da5de89c37ecfa17df31a096905bcd868d307cc6
SHA256:	3e08593a12194ec97b06da17159aabd7bab1e82246bdfdee63466131a7a05a7c

Overview

extension32.dll is loaded as dynamic link library that runs in the context of Internet Explorer. It is installed in Internet Explorer as a Browser Helper Object (BHO) which has full acess to the web browser's behaviors and content. It is installed with a couple of know programs including Updater By SweetPacks 2.0.0.566 published by SweetIM Technologies Ltd. and Native Instruments Komplete Elements Mk2 published by Native Instruments. The file is digitally signed by Bit Cocktail Ltd. which was issued by the Thawte certificate authority (CA).

Details

File name:	extension32.dll
Typical file path:	C:\Program Files\plazy\extension32.dll
Original name:	Extension.dll
File version:	2.0.0.566
Size:	166.84 KB (170,840 bytes)
Certificate
Issued to:	Bit Cocktail Ltd.
Authority (CA):	Thawte
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

Native Instruments Komplete Elements Mk2

Native Instruments

12% remove

“Packing a comprehensive selection of production-ready sounds and effects, Native Instruments KOMPLETE ELEMENTS is the perfect introduction to the world of KOMPLETE. This collection delivers a wide range of studio quality tools at unbeatable value, and is infinitely expandable with the ever-growing range of Native Instruments KOMPLETE Instruments and Effects. KOMPLETE ELEMENTS contains over 3 GB of material with over 1000 sounds, all ...”

Updater By SweetPacks

SweetIM Technologies Ltd.

67% remove

Updater By SweetPacks (from Perion) is designed to monitor and keep the SweetPacks programs automatically up to date. It checks for software updates and automatically downloads and installs them if found. It does so by adding a startup entry to the registry to automatically load each time a user logs into windows and remotely checks its server for updates by adding a Windows firewall exception. If an update is found it will silently ins...

Behaviors

Internet Explorer Browser Helper Object

Located in the registry at 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects'

BHO CLSID: {7D4F1959-3F72-49d5-8E59-F02F8AA6815D}
BHO CLSID: {C4CFC0DE-134F-4466-B2A2-FF7C59A8BFAD}
BHO CLSID: {7D99783A-E6BF-4a1a-A923-4DAA5ADF3D66}
BHO CLSID: {1F30D846-4BEF-4246-B19E-7E503B0E6639}
BHO CLSID: {336D0C35-8A85-403a-B9D2-65C292C39087}
BHO CLSID: {FEFE89E5-A43F-4f4b-8211-B11D91D02135}
BHO CLSID: {A6629839-6636-4998-95D6-2B0F52141861}
BHO CLSID: {70481DB1-0A21-4ae4-AEB8-AD820E7052C4}
BHO CLSID: {121C6AF3-6778-4360-AFDB-57BD4E3E4343}

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	26.47%
Windows 8	20.59%
Windows Vista Home Premium	17.65%
Windows 7 Ultimate N	11.76%
Microsoft Windows XP	8.82%
Windows 8 Pro	5.88%
Windows 7 Ultimate	2.94%
Windows 7 Starter	2.94%
Windows 7 Professional	2.94%

Distribution by country

United States installs about 79.41% of extension32.dll.

Distribution by PC manufacturer

PC Manufacturer	distribution
Toshiba	55.56%
Hewlett-Packard	19.44%
Sony	11.11%
Gateway	5.56%
ASUS	5.56%
GIGABYTE	2.78%

Remove Adware and Spyware Programs, FREE Download!