» nprw_new.dll
Overview
Analysis
File Details

nprw_new.dll

Comsquare RedWood Viewer

Comsquare Inc

File name:

nprw_new.dll

Publisher:

Comsquare (signed by Comsquare Inc)

Product:

Comsquare RedWood Viewer

Description:

RedWood Viewer

Version:

4, 3, 0, 95

MD5:

b290f5e7ec98399e73ef0a090830cc55

SHA-1:

8bc2e50b8df0043b63829b3a781e7dc283cc2b68

SHA-256:

ed67022850b1099bba6b7bd98edb3d0883a08ad690a4bc88d55e1742f8913175

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/23/2024 5:10:31 AM UTC (today)

File size:

3.1 MB (3,291,128 bytes)

Product version:

4, 3, 0, 0

Original file name:

nprw.dll

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Windows\System32\nprw_new.dll

Digital Signature

Signed by:

Comsquare Inc

Authority:

GlobalSign nv-sa

Valid from:

10/28/2011 3:13:06 PM

Valid to:

10/28/2012 3:13:06 PM

Subject:

CN=Comsquare Inc, OU=Dev Team, O=Comsquare Inc, L=Gangnam-gu, S=Seoul, C=KR

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

112182F8B1847017CB00A2EF9CE25B4D6F3F

Registration

CLSIDs:

{07EE651F-0CE5-4c77-A697-816D3ACD64A6}, {09942BD1-8A27-4efd-B90D-B4D1CBF230DD}, {145F9F3B-F7B1-4d3a-82C2-50ADE08EAB18}, {1C1031E5-D3CA-4b1d-A5C3-1FA01C515045}, {1D2F0ADD-1E3A-44cd-A409-96AB740EA295}, {22734429-A785-4ea8-9434-64CD2E6CC7FB}

ProgIDs:

RWViewer.DispDispatchColl.1, RWViewer.DispSelect.1, RWViewer.DispCalendarItem.1, RWViewer.DispSelect1.1, RWViewer.DispWindowColl.1, RWViewer.DispDocument.1, RWViewer.DispElementColl.1, RWViewer.DispInstance.1, RWViewer.DispButton.1, RWViewer.DispNode.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

7/4/2012 9:18:03 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

49152:E9PoKTsyQgf2Io7N5QwC5MCkI46Qaf5hBrTAQsVhsmbAxabRKUA702BAUZLYHRSJ:OXTsyQgeIUN5XC5lkI4fafBxBAUZLm4J

Entry address:

0x19DCB9

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, 91, 00, 01, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 8B, 44, 24, 04, 99, F7, 7C, 24, 08, 83, 7C, 24, 04, 00, 7D, 09, 85, D2, 7E, 05, 40, 2B, 54, 24, 08, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 83, 3D, D8, 9D, 2C, 10, 00, 0F, 84, 87, 00, 00, 00, 83, EC, 08, 0F, AE, 5C, 24, 04, 8B, 44, 24, 04, 25, 80, 1F, 00, 00, 3D, 80, 1F, 00, 00, 75, 0F, D9, 3C, 24, 66, 8B, 04, 24, 66, 83, E0, 7F, 66, 83, F8, 7F, 8D, 64, 24, 08, 75... 
[+]

Entropy:

6.6906

Code size:

2 MB (2,048,000 bytes)

Scan nprw_new.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.