home

TFBroker.DLL

TFBroker Module

Comsquare Corp

Publisher:
Comsquare Corp  (signed and verified)

Product:
TFBroker Module

Version:
1, 0, 0, 4

MD5:
74550f20973ee2080facedad38a56cd1

SHA-1:
1d89faa3428fa8ae2d7f61f21a3365551f24850e

SHA-256:
af931dacca625556edadac2469ce1800e91f501f5463236f906e6213c222d5f0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 8:12:26 PM UTC  (today)

File size:
825.5 KB (845,288 bytes)

Product version:
1, 0, 0, 4

Copyright:
Copyright 2007

Original file name:
TFBroker.DLL

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Windows\System32\tfbroker.dll

Digital Signature
Signed by:
Comsquare Corp

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
10/20/2008 3:31:35 PM

Valid to:
10/31/2010 3:30:53 PM

Subject:
CN=Comsquare Corp, OU=Development Department, O=Comsquare Corp, L=SEOUL, S=GYEONGGI-DO, C=KR

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
67CC555F9B7ABC46DD0183D62A4F7ED4

Registration
CLSID:
{0DFA67D7-B78C-40A7-B583-E7090D5F38C6}

ProgID:
TFBroker.FileManager.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
1/8/2008 3:42:47 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:JnYI/b38fk3OwmTzHnoWocKH8acmfEthIkyExB8IZe8AWY9xRR3D+:eI/L3OwmTzIWorit6kJBSlW8K

Entry address:
0x49AF0

Entry point:
E9, CB, 6E, 03, 00, E9, 56, E3, 01, 00, E9, 71, FA, 00, 00, E9, 0C, D7, 02, 00, E9, 69, B5, 02, 00, E9, 7A, B4, 02, 00, E9, 6D, 31, 01, 00, E9, B8, CF, 03, 00, E9, A3, 7C, 01, 00, E9, 2E, B7, 08, 00, E9, E9, 77, 02, 00, E9, E4, 73, 02, 00, E9, 3F, DF, 03, 00, E9, 0A, AD, 01, 00, E9, 95, 49, 07, 00, E9, 50, 18, 03, 00, E9, CB, A8, 01, 00, E9, D6, 3D, 01, 00, E9, A1, D1, 03, 00, E9, 2E, 3A, 05, 00, E9, E7, 27, 02, 00, E9, 52, 35, 05, 00, E9, 6D, C2, 03, 00, E9, 98, FA, 02, 00, E9, A3, 77, 07, 00, E9, 0E, 2D...
 
[+]

Entropy:
5.6534

Developed / compiled with:
Microsoft Visual C++ 8.0 (Debug)

Code size:
608 KB (622,592 bytes)

ActiveX Install
Name:
{ED5D862B-6A06-46DE-A929-F2C588742CBD}


Scan TFBroker.DLL - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.