» ENWIEPlug.DLL
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

ENWIEPlug.DLL

EndNote

Thomson Reuters (Scientific) Inc.

It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘EndNote Helper’. This is installed with EndNote Plug-Ins.

File name:

ENWIEPlug.DLL

Publisher:

Thomson Reuters (signed by Thomson Reuters (Scientific) Inc.)

Product:

EndNote

Description:

EndNote 3.8.1

Version:

3.8.1 (Bld 3691)

MD5:

050d55d9e200063e56f31f050d2f5d05

SHA-1:

c4910cee1014b7c6eef16c612d83424e828c4918

SHA-256:

79b8bbea5c08bffaeb28d042bcc4395537836960c84970732cc48beaf7409101

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 1:37:03 PM UTC (today)

File size:

259.9 KB (266,088 bytes)

Product version:

3.8.1 (Bld 3691)

Original file name:

ENWIEPlug.DLL

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\endnote plug-ins\enwieplug.dll

Digital Signature

Signed by:

Thomson Reuters (Scientific) Inc.

Authority:

GlobalSign nv-sa

Valid from:

2/20/2013 2:03:59 PM

Valid to:

5/8/2014 3:07:21 PM

Subject:

CN=Thomson Reuters (Scientific) Inc., O=Thomson Reuters (Scientific) Inc., L=Philadelphia, S=PA, C=US

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

11217E02BE8CB5DEDA517C8B8C03084B85D7

File PE Metadata

Compilation timestamp:

4/11/2014 6:16:43 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

3072:nl6GV53OBG9QLVem10ARxpGi3ODX2KKTaGIRtK8pP0QJzlavEUcCppnmOZza/epj:nl6aqjLVem1B8zKqNJOUCpoOZzSeoDpQ

Entry address:

0x24A09

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, BB, 05, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, CC, FE, FF, FF, 59, 5D, C2, 0C, 00, 33, C0, 38, 05, A0, 72, 03, 10, 75, 1B, 50, 6A, 01, 50, 50, 50, C6, 05, A0, 72, 03, 10, 01, E8, 50, 06, 00, 00, 50, E8, 21, 06, 00, 00, 83, C4, 18, C3, 6A, 01, 33, C0, 6A, 01, 50, 50, 50, E8, 38, 06, 00, 00, 83, C4, 14, C3, 75, 01, C3, 55, 8B, EC, 83, EC, 00, 50, 52, 53, 56, 57, 6A, 00, FF, 75, 04, E8, DA, 08, 00, 00, 59, 59, 5F, 5E, 5B, 5A, 58, 8B, E5, 5D, C3, 8B, FF... 
[+]

Code size:

159.5 KB (163,328 bytes)

Internet Explorer BHO

CLSID:

{82D2E569-25A7-4E4D-9FA3-C5025B4B7912}

CLSID name:

EndNote Helper

The file ENWIEPlug.DLL has been discovered within the following program.

EndNote Plug-Ins by Thomson Reuters

endnote.com

About 5% of users remove it

Scan ENWIEPlug.DLL - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.