» WRObj.dll
Overview
Analysis
File Details
Behaviors (1)

WRObj.dll

Web-Recherche

macropool GmbH

File name:

WRObj.dll

Publisher:

macropool GmbH (signed and verified)

Product:

Web-Recherche

Description:

Objektbibliothek für Web-Recherche

Version:

3.10.3267

MD5:

5ef711ea50c8d72f4865573fd60e2a6f

SHA-1:

f513cbcecf3f3b73cfd4cd6ea9d7e9c502f259c4

SHA-256:

b3ca8b1cdcf622abd616c2e3dd44df31ea76cd6a5f4802df66e779ca25551a8d

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/20/2024 9:35:13 AM UTC (today)

File size:

1 MB (1,074,624 bytes)

Product version:

3.10.3267

Original file name:

WRObj.dll

File type:

Dynamic link library (Win32 DLL)

Language:

German (Germany)

Common path:

C:\Program Files\web-recherche\wrobj.dll

Digital Signature

Signed by:

macropool GmbH

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

9/26/2009 2:00:00 AM

Valid to:

9/27/2011 1:59:59 AM

Subject:

CN=macropool GmbH, OU=SECURE APPLICATION DEVELOPMENT, O=macropool GmbH, L=Weiden i.d.Opf., S=Bayern, C=DE

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

7C039748128160579854C9F6AA0BABE0

Registration

CLSIDs:

{049B52E1-CADB-4460-BCB7-2933361867BF}, {1A92190D-4693-449F-9D84-0FBEF07308BE}

ProgIDs:

WebResearch.Namespace, WebResearch.Search

COM registered:

Yes

File PE Metadata

Compilation timestamp:

7/20/2011 2:32:55 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

12288:Y/Y7PHWcLbl5iGhbz+thYtwisYVQ5uYWoGv65OeFVTComa6JFo1n9IA0DdU:Y/Y77bl5iGhbopYVQ5uYiOmFo1n9vMS

Entry address:

0x6B78

Entry point:

5A, 68, 2C, 37, 53, 05, 68, 30, 37, 53, 05, 52, E9, E7, FF, FF, FF, 00, 00, 00, 68, 00, 00, 00, 30, 00, 00, 00, 60, 00, 00, 00, 40, 00, 00, 00, 6A, 0B, E5, 6C, 0F, 04, AB, 47, 86, D8, CD, 69, 5F, 9D, 6D, 48, 00, 00, 00, 00, 00, 00, 03, 00, 04, 00, 78, 70, 6C, 69, 63, 69, 57, 65, 62, 52, 65, 73, 65, 61, 72, 63, 68, 00, 45, 6E, 75, 6D, 57, 65, 62, 2D, 52, 65, 63, 68, 65, 72, 63, 68, 65, 20, 4F, 62, 6A, 65, 6B, 74, 62, 69, 62, 6C, 69, 6F, 74, 68, 65, 6B, 00, 72, 00, 63, 6B, 65, 74, 20, 3D, 20, C8, 00, 00, 00... 
[+]

Developed / compiled with:

Microsoft Visual Basic v6.0

Code size:

828 KB (847,872 bytes)

Automation Object

CLSID:

{049B52E1-CADB-4460-BCB7-2933361867BF}

CLSID name:

WebResearch.Namespace

Scan WRObj.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.