home

MsftEdit.dll

Microsoft RichEdit Control, version 4.1

Bit-Trejd

Publisher:
Microsoft Corporation  (signed by Bit-Trejd)

Product:
Microsoft RichEdit Control, version 4.1

Description:
Rich Text Edit Control, v4.1

Version:
5.41.21.2506

MD5:
062a887a1baafd1375264789db224450

SHA-1:
0e547aa30b71e5cc4878378ba776d8c87d3a6b45

SHA-256:
dc14dd13f3a6327678691b401df0dd8c29aa59dd1c8cae0fbe60b6e2310b4fd8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 8:33:56 PM UTC  (today)

File size:
536.2 KB (549,088 bytes)

Product version:
4.1

Copyright:
Copyright © Microsoft Corp. 1997-2001.

Original file name:
MsftEdit.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\7369086.tmp\msftedit.dll

Digital Signature
Signed by:
Bit-Trejd

Authority:
COMODO CA Limited

Valid from:
5/30/2016 3:00:00 AM

Valid to:
5/31/2017 2:59:59 AM

Subject:
CN=Bit-Trejd, OU=IT, O=Bit-Trejd, STREET=1st Kolobovskij pereulok d. 27/3 str.3 office 30, L=Moscow, S=Moscow, PostalCode=127051, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
54460E1FCD612CD3377AC2CD76E4240F

File PE Metadata
Compilation timestamp:
2/17/2007 5:01:48 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
12288:GKZXy+oduYWM+482+naP1wOWlQGPgQIh+Ec5p8Lm1I+7CzevxzAt:w+oyM02S9OWlBPgBl61e8xe

Entry address:
0x73F49

Entry point:
8B, FF, 55, 8B, EC, 53, 8B, 5D, 08, 56, 8B, 75, 0C, 85, F6, 57, 8B, 7D, 10, 75, 09, 83, 3D, C8, 6F, EF, 6D, 00, EB, 26, 83, FE, 01, 74, 05, 83, FE, 02, 75, 22, A1, E0, 6F, EF, 6D, 85, C0, 74, 09, 57, 56, 53, FF, D0, 85, C0, 74, 0C, 57, 56, 53, E8, 09, FF, FF, FF, 85, C0, 75, 04, 33, C0, EB, 4E, 57, 56, 53, E8, 70, 44, FD, FF, 83, FE, 01, 89, 45, 0C, 75, 0C, 85, C0, 75, 37, 57, 50, 53, E8, E5, FE, FF, FF, 85, F6, 74, 05, 83, FE, 03, 75, 26, 57, 56, 53, E8, D4, FE, FF, FF, 85, C0, 75, 03, 21, 45, 0C, 83, 7D...
 
[+]

Code size:
467.5 KB (478,720 bytes)

Scan MsftEdit.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.