home

Gwbhand_ks.dll

机关公文助手

Li Yongfa

Publisher:
Gwbsoft  (signed by Li Yongfa)

Product:
机关公文助手

Version:
1.00

MD5:
3b5406c150806277d0ecc2c100840814

SHA-1:
8beb08ee8f7834728b844710bae31eb05471961b

SHA-256:
33016f68f4578bd07a21d458a676777422774310531bd39cd2bc43b3e8c50d12

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 6:45:42 PM UTC  (today)

File size:
203.6 KB (208,536 bytes)

Product version:
1.00

Original file name:
Gwbhand_ks.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\公文标准格式制作软件\gwbhand_ks.dll

Digital Signature
Signed by:
Li Yongfa

Authority:
WoSign CA Limited

Valid from:
3/12/2014 11:34:01 AM

Valid to:
3/12/2015 11:34:01 AM

Subject:
CN=Li Yongfa, E=support@lifsoft.com, L=怀集县, S=广东省, C=CN

Issuer:
CN=WoSign Class 2 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
0FB018C85B092B8EFB5B98ED25235F0A

Registration
CLSID:
{67601F0B-2969-4754-8873-E19A7C2137C6}

ProgID:
KSAddins.Gwbhand

COM registered:
Yes

File PE Metadata
Compilation timestamp:
6/5/2014 1:55:50 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:4Mo7wZ/iDErDGVO5DTyT/PpE/M6/4bpdaxeCXGey++XgzD7kA9C20JFt50bIGG2r:9/JpRtZ9UGG2MRuXv94u

Entry address:
0x1D5C

Entry point:
5A, 68, 74, C5, 02, 11, 68, 78, C5, 02, 11, 52, E9, E9, FF, FF, FF, 00, 00, 00, 48, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 47, 33, CD, 33, 1A, 76, F4, 49, AA, C3, 79, 91, 2F, 5A, 5B, 76, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 30, 30, 30, 2D, 43, 30, 4B, 53, 41, 64, 64, 69, 6E, 73, 00, 30, 30, 30, 30, 34, 36, 7D, 00, 32, 2E, 30, 23, 30, 23, 43, 00, 00, 00, 00, 90, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 00, 00, 00, 00, 0B, 1F, 60, 67, 69, 29, 54, 47, 88, 73, E1, 9A, 7C, 21, 37, C6...
 
[+]

Entropy:
5.8068

Developed / compiled with:
Microsoft Visual Basic v6.0

Code size:
168 KB (172,032 bytes)

Automation Object
CLSID:
{67601F0B-2969-4754-8873-E19A7C2137C6}

CLSID name:
KSAddins.Gwbhand


Scan Gwbhand_ks.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.