» jwdsrch.dll
Overview
Analysis
File Details
Behaviors (1)

jwdsrch.dll

JWord Plugin

JWord Inc.

It is installed within the context of Internet Explore as a URL search hook with the name ‘JWordPlugin’.

File name:

jwdsrch.dll

Publisher:

JWord Inc. (signed and verified)

Product:

JWord Plugin

Description:

JWord Plugin Search

Version:

2, 1, 0, 7

MD5:

b83998bd4ce22e7b58a64ea025a68386

SHA-1:

2eea1d18f0374ac4608b5ad5f61fe17625c3a0fa

SHA-256:

9bb5ae8c8e433706e22459dc52c45970cd4601d930ba51cea2ac84fe8f795479

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/25/2024 9:40:06 AM UTC (today)

Scan engine

Detection

Engine version

Panda Antivirus

Suspicious file

14.05.08.08

File size:

209.6 KB (214,672 bytes)

Product version:

2, 1, 0, 7

Original file name:

jwdsrch.dll

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Program Files\jword\plugin2\jwdsrch.dll

Digital Signature

Signed by:

JWord Inc.

Authority:

GlobalSign nv-sa

Valid from:

1/11/2008 7:55:10 PM

Valid to:

1/11/2009 7:55:10 PM

Subject:

E=support@jword.jp, CN=JWord Inc., O=JWord Inc., C=JP

Issuer:

CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:

01000000000117687D3041

Registration

CLSID:

{2ACECADE-0BC7-4c6f-95CF-A221CC161B52}

ProgID:

QSearch.MyUrlSearchHook.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

5/9/2008 6:36:02 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

3072:zP62XKXQ/4x6y08ssf7fbpcuV1M+bXfdyxUrTpJ4tGohP8P2DepYT:W2XKAwERfArbpcuvJFwiTfziT

Entry address:

0x126B7

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, 7C, 5D, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 8B, 44, 24, 04, 33, C9, 3B, 04, CD, 20, 6E, 02, 10, 74, 12, 41, 83, F9, 2D, 72, F1, 8D, 48, ED, 83, F9, 11, 77, 0C, 6A, 0D, 58, C3, 8B, 04, CD, 24, 6E, 02, 10, C3, 05, 44, FF, FF, FF, 6A, 0E, 59, 3B, C8, 1B, C0, 23, C1, 83, C0, 08, C3, E8, 90, 1D, 00, 00, 85, C0, 75, 06, B8, 88, 6F, 02, 10, C3, 83, C0, 08, C3, E8, 7D, 1D, 00, 00, 85, C0, 75, 06, B8, 8C, 6F, 02, 10, C3, 83, C0... 
[+]

Entropy:

6.1964

Code size:

112 KB (114,688 bytes)

Internet Explorer URL Search Hook

Display name:

JWordPlugin

CLSID:

{2ACECADE-0BC7-4C6F-95CF-A221CC161B52}

CLSID name:

MyUrlSearchHook Class

Scan jwdsrch.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.