» nprw.dll
Overview
Analysis
File Details

nprw.dll

Comsquare RedWood Viewer

Comsquare Inc

File name:

nprw.dll

Publisher:

Comsquare (signed by Comsquare Inc)

Product:

Comsquare RedWood Viewer

Description:

RedWood Viewer

Version:

4, 0, 660, 71

MD5:

810ba633055d4e8cfccb2cb6ed3201f0

SHA-1:

e07680df98c164582275069c88887912de3cd2f1

SHA-256:

920f3e911c9eb26e773086bfa533ae52f7acca901ad4dbd154e626cd968ab0ba

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 11:31:57 PM UTC (a few moments ago)

File size:

2.9 MB (3,075,840 bytes)

Product version:

4, 0, 6, 6

Original file name:

nprw.dll

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Program Files\lef\nprw.dll

Digital Signature

Signed by:

Comsquare Inc

Authority:

GlobalSign nv-sa

Valid from:

10/28/2011 3:13:06 PM

Valid to:

10/28/2012 3:13:06 PM

Subject:

CN=Comsquare Inc, OU=Dev Team, O=Comsquare Inc, L=Gangnam-gu, S=Seoul, C=KR

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

112182F8B1847017CB00A2EF9CE25B4D6F3F

Registration

CLSIDs:

{13AE2687-7AB3-46C1-B4B4-F36AA5C7DE42}, {1628F322-75F8-419C-B39E-071722B0AAE0}, {1A1084B1-4B1E-4C98-9D0A-C4106B9B87A6}, {22BA6BE1-0E15-4385-9DA2-B565D8CCDF36}, {24A70C49-7746-466D-840D-65EA5E458650}, {25B9FEC5-26E9-4FAB-9754-5417E3934146}

ProgIDs:

RWViewer.DispBind.1, RWViewer.DispTreeItem.1, RWViewer.DispInstance.1, RWViewer.DispSelectItem.1, RWViewer.DispElementColl.1, RWViewer.DispIViewer.1, RWViewer.DispSelect1.1, RWViewer.DispErrorInfo.1, RWViewer.DispSecret.1, RWViewer.DispMultiLineGrid.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

3/8/2012 2:35:31 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

49152:IzfNHCCi7niuty76gP1XbLgk0XbgwkGP4DJ2kNA6DlH1RARk02BAUZLY6DYFo:yf4Cmndty7pP1ok0Xbgwkw4D0bsH1TB/

Entry address:

0x17DF04

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, 35, F1, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 8B, 44, 24, 04, 99, F7, 7C, 24, 08, 83, 7C, 24, 04, 00, 7D, 09, 85, D2, 7E, 05, 40, 2B, 54, 24, 08, C3, CC, 83, 3D, 74, 98, 29, 10, 00, 0F, 84, 87, 00, 00, 00, 83, EC, 08, 0F, AE, 5C, 24, 04, 8B, 44, 24, 04, 25, 80, 1F, 00, 00, 3D, 80, 1F, 00, 00, 75, 0F, D9, 3C, 24, 66, 8B, 04, 24, 66, 83, E0, 7F, 66, 83, F8, 7F, 8D, 64, 24, 08, 75, 5A, E9, 7A, F1, 00, 00, 90, 83, 3D, 74, 98... 
[+]

Entropy:

6.6980

Code size:

1.8 MB (1,892,352 bytes)

Scan nprw.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.