home

hanbirooffice_.ocx

HANBIRO INC

Publisher:
Any Draw  (signed by HANBIRO INC)

Description:
Office Viewer ActiveX Control

Version:
2.5

MD5:
dc4d86def3ebeba2f129db8e2bdb8381

SHA-1:
7ece9f164045fd77d464d16109dd06c7c8797e53

SHA-256:
12e37e9e339f27f46bb07fa8649d1f030eec39a535095d3a127aa1fd695d2997

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/4/2024 2:29:49 AM UTC  (today)

File size:
98.7 KB (101,112 bytes)

Product version:
1, 0, 0, 5

Copyright:
Copyright 2005; Any Draw Software. All rights reserved.

Original file name:
hanbirooffice.ocx

File type:
OLE control extension (Win32 OCX)

Common path:
C:\windows\downloaded Program Files\hanbirooffice_.ocx

Digital Signature
Signed by:
HANBIRO INC

Authority:
COMODO CA Limited

Valid from:
3/2/2016 9:00:00 AM

Valid to:
6/1/2019 8:59:59 AM

Subject:
CN=HANBIRO INC, O=HANBIRO INC, STREET="2457, Nambusunhwan-ro", L=Seocho-gu, S=Seoul, PostalCode=06725, C=KR

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00EFB51E0609556CD126A34A873C17961E

Registration
CLSID:
{8E93EC1F-B2A9-4C4A-85B4-7A5AC2258879}

ProgID:
OfficeViewer.Control

COM registered:
Yes

File PE Metadata
Compilation timestamp:
2/28/2014 5:50:21 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

Entry address:
0xE478

Entry point:
6A, 0C, 68, C0, 29, 00, 22, E8, E8, F9, FF, FF, 33, C0, 40, 89, 45, E4, 8B, 75, 0C, 33, FF, 3B, F7, 75, 0C, 39, 3D, 18, 43, 01, 22, 0F, 84, B3, 00, 00, 00, 89, 7D, FC, 3B, F0, 74, 05, 83, FE, 02, 75, 31, A1, D8, 48, 01, 22, 3B, C7, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D0, 89, 45, E4, 39, 7D, E4, 0F, 84, 85, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 98, FE, FF, FF, 89, 45, E4, 3B, C7, 74, 72, 8B, 5D, 10, 53, 56, FF, 75, 08, E8, 9C, CF, FF, FF, 89, 45, E4, 83, FE, 01, 75, 0E, 3B, C7, 75, 0A, 53, 57, FF...
 
[+]

Entropy:
6.4530

Developed / compiled with:
Microsoft Visual C++ v7.1

Code size:
75.5 KB (77,312 bytes)

Scan hanbirooffice_.ocx - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.