» sfa_nprw.dll
Overview
Analysis
File Details

sfa_nprw.dll

Comsquare RedWood Viewer

Comsquare Inc

File name:

sfa_nprw.dll

Publisher:

Comsquare (signed by Comsquare Inc)

Product:

Comsquare RedWood Viewer

Description:

RedWood Viewer

Version:

4, 4, 0, 36

MD5:

503e00fda3e1ff4207e9aa60f50b2e9b

SHA-1:

dc7036b6049eacde1fddf82d5e5a83f40d4ff268

SHA-256:

6212248b73eae513043b9f4f730bcf3b10f56960b712081a7eb314251d3b778a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/18/2024 7:10:58 AM UTC (today)

File size:

3.1 MB (3,291,568 bytes)

Product version:

4, 4, 0, 36

Original file name:

nprw.dll

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Program Files\sfa\bin\sfa_nprw.dll

Digital Signature

Signed by:

Comsquare Inc

Authority:

GlobalSign nv-sa

Valid from:

10/22/2012 12:11:34 PM

Valid to:

11/28/2014 3:13:05 PM

Subject:

CN=Comsquare Inc, OU=Dev Team, O=Comsquare Inc, L=Gangnam-gu, S=Seoul, C=KR

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

11215546446CBB48801ABBA8E13F628FB675

Registration

CLSIDs:

{0372F385-6F57-4677-ADB2-5A96A57475F2}, {0621A15D-B36F-4fb7-AED3-8F1D8D356EFB}, {092EA43C-2D20-45aa-891A-0C06F4C549D3}, {141FF4DE-FF24-4017-978D-2D9E4D093253}, {167D390D-DBFB-4aa5-8088-875816058884}, {1CEAD7E5-D77F-4f53-A392-F60860895FFA}

ProgIDs:

RWViewer.DispCurrentStyle.1, RWViewer.DispDataGrid.1, RWViewer.DispEvent.1, RWViewer.DispCaption.1, RWViewer.DispWindow.1, RWViewer.DispIViewer.1, RWViewer.DispSelect1.1, RWViewer.DispBool.1, RWViewer.DispNodelist.1, RWViewer.DispDispatchColl.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

10/29/2014 10:08:45 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

98304:Ajc/1T2c8gsy9+zIIiakBAUZLdFL4ExzV:Qc/tr8gfNakVLLXxzV

Entry address:

0x19BD09

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, 5D, F3, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 8B, 44, 24, 04, 99, F7, 7C, 24, 08, 83, 7C, 24, 04, 00, 7D, 09, 85, D2, 7E, 05, 40, 2B, 54, 24, 08, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 83, 3D, D4, 97, 2C, 10, 00, 0F, 84, 87, 00, 00, 00, 83, EC, 08, 0F, AE, 5C, 24, 04, 8B, 44, 24, 04, 25, 80, 1F, 00, 00, 3D, 80, 1F, 00, 00, 75, 0F, D9, 3C, 24, 66, 8B, 04, 24, 66, 83, E0, 7F, 66, 83, F8, 7F, 8D, 64, 24, 08, 75... 
[+]

Entropy:

6.6986

Code size:

1.9 MB (2,039,808 bytes)

Scan sfa_nprw.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.