home

cnsminidn.dll

idnhelper Module

JWord Inc.

It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘IDN Helper Object’.
Publisher:
JWord Inc.  (signed and verified)

Product:
idnhelper Module

Version:
2, 0, 2, 8

MD5:
4ad8e857a2705e3360e5484a3c8fa564

SHA-1:
8dc90607d27a23e48c51708bdc247720b7ed3bab

SHA-256:
53e9f943d85105a3e6d7ae13426f1ec80e26f1f98abdbbb1d0a35abfe915b05e

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/26/2024 3:51:27 PM UTC  (today)

Scan engine
Detection
Engine version

G Data
Win32.Application.CNSHelper
16.7.24

File size:
69.8 KB (71,520 bytes)

Product version:
2, 0, 2, 8

Copyright:
Copyright (C) 2000 - 2005 JWord Inc, All Rights Reserved.

Original file name:
idnhelper.DLL

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\windows\downloaded Program Files\cnsminidn.dll

Digital Signature
Signed by:
JWord Inc.

Authority:
VeriSign, Inc.

Valid from:
2/13/2006 9:00:00 AM

Valid to:
2/14/2007 8:59:59 AM

Subject:
CN=JWord Inc., OU=R&D Department, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=JWord Inc., L=Shibuya-ku, S=Tokyo, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
654D12E508EA141007891E40E048DCC9

File PE Metadata
Compilation timestamp:
3/3/2006 3:39:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
768:hkD/0Fb7Ay3cDZkeTnzY9QqCJfoVVnVpb4OGX6Y5L+3XoH/8q8E9A9aUXOxQzukW:h+0my25ZMVdGH6nofiEAgqzVJocsv

Entry address:
0x8898

Entry point:
FF, 74, 24, 0C, FF, 74, 24, 0C, FF, 74, 24, 0C, E8, 05, A4, FF, FF, C2, 0C, 00, FF, 15, 98, A0, 00, 10, 33, C0, C3, A1, B0, C7, 00, 10, 56, 85, C0, 75, 13, FF, 74, 24, 08, 50, FF, 35, 50, C7, 00, 10, FF, 15, D0, A0, 00, 10, 5E, C3, 8B, 0D, B4, C7, 00, 10, 8B, 15, AC, C7, 00, 10, FF, 05, B4, C7, 00, 10, 23, D1, 8B, 34, 90, 8B, 44, 24, 08, 83, C0, 08, 50, 6A, 00, 56, FF, 15, D0, A0, 00, 10, 85, C0, 74, 07, 89, 30, 83, C0, 08, 5E, C3, 33, C0, 5E, C3, 8B, 44, 24, 04, 33, C9, 3B, C1, 75, 0B, FF, 74, 24, 08, E8...
 
[+]

Entropy:
5.6412

Code size:
36 KB (36,864 bytes)

Internet Explorer BHO
Display name:
IDN Helper Object

CLSID:
{118CE65F-5D86-4AEA-A9BD-94F92B89119F}

CLSID name:
IdnHelperObj Class


Scan cnsminidn.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.