home

dsoframer.ocx

dsoframer.ocx

Tongfang Knowledge Network Technology (Beijing) Co.,Ltd.

Publisher:
surrex china  (signed by Tongfang Knowledge Network Technology (Beijing) Co.,Ltd.)

Product:
dsoframer.ocx

Description:
Custom Office Framer Control

Version:
2.3.0.0(PR)

MD5:
17b756d2040270a57d91cc9a675e63c5

SHA-1:
c0074757215bad1621fdf8af445e3a444a8f41ee

SHA-256:
e1a49359b921e5cc48f86a733a35ad7bd3ed4ba24e83922ead86eb6e010017f0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 11:40:14 AM UTC  (today)

File size:
1.1 MB (1,163,768 bytes)

Product version:
2, 3, 0, 0

Original file name:
dsoframer.ocx

File type:
OLE control extension (Win32 OCX)

Common path:
C:\windows\downloaded Program Files\dsoframer.ocx

Digital Signature
Signed by:
Tongfang Knowledge Network Technology (Beijing) Co.,Ltd.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
5/24/2010 8:00:00 AM

Valid to:
6/23/2012 7:59:59 AM

Subject:
CN="Tongfang Knowledge Network Technology (Beijing) Co.,Ltd.", O="Tongfang Knowledge Network Technology (Beijing) Co.,Ltd.", L=Beijing, S=Beijing, C=CN

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
6FFD7C8CCF266E2ACFAA936B178910F3

File PE Metadata
Compilation timestamp:
2/22/2011 11:44:35 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:HcKfeLvnGRRsB7GD3ki9nMjqgGkjpusB+4v/2gN/b8QAZdqvZFy+HsWJa3ND47G0:8KO6RsB0ZMWgGy/qQAZdVKsWG6I9S+Rw

Entry address:
0x33FC0

Entry point:
55, 8B, EC, 51, C7, 45, FC, 01, 00, 00, 00, 83, 7D, 0C, 00, 75, 10, 83, 3D, 40, A3, 10, 10, 00, 75, 07, 33, C0, E9, CC, 00, 00, 00, 83, 7D, 0C, 01, 74, 06, 83, 7D, 0C, 02, 75, 42, 83, 3D, D4, BA, 10, 10, 00, 74, 15, 8B, 45, 10, 50, 8B, 4D, 0C, 51, 8B, 55, 08, 52, FF, 15, D4, BA, 10, 10, 89, 45, FC, 83, 7D, FC, 00, 74, 14, 8B, 45, 10, 50, 8B, 4D, 0C, 51, 8B, 55, 08, 52, E8, 5E, FE, FF, FF, 89, 45, FC, 83, 7D, FC, 00, 75, 04, 33, C0, EB, 7E, 8B, 45, 10, 50, 8B, 4D, 0C, 51, 8B, 55, 08, 52, E8, 90, DC, FE, FF...
 
[+]

Entropy:
6.3906

Developed / compiled with:
Microsoft Visual C++ v6.0 (Debug)

Code size:
880 KB (901,120 bytes)

ActiveX Install
Name:
{00460182-9E5E-11D5-B7C8-B8269041DD57}


Scan dsoframer.ocx - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.