home

Rockey4ND.dll

Rockey4ND Library

Feitian Technologies Co., Ltd.

Publisher:
Feitian Technologies Co.,Ltd.  (signed by Feitian Technologies Co., Ltd.)

Product:
Rockey4ND Library

Version:
1, 4, 12, 813

MD5:
a025519898fa000099c6396e16b861c5

SHA-1:
9211b543c2f79ed0d3042ac4c3bb9fcc53f73bf6

SHA-256:
46f3d9a3f7e18ba2ae68060bd50312a026b059f2b78a09a16014129f56ede0e0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/6/2024 12:43:14 PM UTC  (today)

File size:
78 KB (79,824 bytes)

Product version:
1, 4, 12, 813

Copyright:
Copyright (C) 2001-2010 Feitian Technologies Co.,Ltd.

Original file name:
Rockey4ND.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\zwcad+ 2014\rockey4nd.dll

Digital Signature
Signed by:
Feitian Technologies Co., Ltd.

Authority:
VeriSign, Inc.

Valid from:
5/15/2010 3:00:00 AM

Valid to:
6/2/2013 2:59:59 AM

Subject:
CN="Feitian Technologies Co., Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Feitian Technologies Co., Ltd.", L="Beijing,China", S="Beijing,China", C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2DB7D07D6233552F85E5690E446B1C2C

File PE Metadata
Compilation timestamp:
8/13/2012 6:35:09 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
768:Pv6tOYbK003XiPnwjjmXTda4UeaeePtuPS9UchMSEkKocAtgwRiaIILWHbC:qtcXKTdmq6tuP0dmdAtnR1a7C

Entry address:
0x4EA2

Entry point:
55, 8B, EC, 53, 8B, 5D, 08, 56, 8B, 75, 0C, 57, 8B, 7D, 10, 85, F6, 75, 09, 83, 3D, 08, 21, 01, 10, 00, EB, 26, 83, FE, 01, 74, 05, 83, FE, 02, 75, 22, A1, 1C, 38, 01, 10, 85, C0, 74, 09, 57, 56, 53, FF, D0, 85, C0, 74, 0C, 57, 56, 53, E8, E7, FE, FF, FF, 85, C0, 75, 04, 33, C0, EB, 4E, 57, 56, 53, E8, AE, FA, FF, FF, 83, FE, 01, 89, 45, 0C, 75, 0C, 85, C0, 75, 37, 57, 50, 53, E8, C3, FE, FF, FF, 85, F6, 74, 05, 83, FE, 03, 75, 26, 57, 56, 53, E8, B2, FE, FF, FF, 85, C0, 75, 03, 21, 45, 0C, 83, 7D, 0C, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
40 KB (40,960 bytes)

The file Rockey4ND.dll has been discovered within the following programs.

teleswin  by Digitel SA
About 3% of users remove it
XLerator 4  by Priority Dispatch
www.prioritydispatch.net
About 8% of users remove it
ZWCAD 2018 English  by ZWSOFT
www.zwsoft.com
About 9% of users remove it
ZWCAD+ 2012 ENU  by ZWSOFT
Publisher's description - “A cost-effective light-weight CAD platform with .dwg compatibility for drafting, modeling, and drawing. The new memory optimization technology enables ZWCAD+ to open any drawing with memory usage reduced by 50%. That's why it works smoothly with drawings that are even over 100 MB.”
12% remove it
ZWCAD+ 2014 English  by ZWSOFT
Publisher's description - “ZWCAD+ creates dimensions which automatically adjust the measurement values, locations and the orientations along with the geometric objects. This intelligent annotation feature makes working easier and more efficiently.”
10% remove it
 
Powered by Should I Remove It?

The file Rockey4ND.dll has been seen being distributed by the following 4 URLs.

http://www.zwcad.pt/uploads/8/7/6/1/.../rockey4nd.dll

https://www.dropbox.com/s/.../Rockey4ND.dll?dl=1

http://www.zwsoft.com/.../attachment.php?aid=NDQzOHxmNGNjMDY5NXwxNDY3MzU0NTI0fDg1ZDh1TkI0dE1vSEgyYytvaTRpN0lKY2hZcHk1S0VGNGRoSHo2Ky9qb3RBTWJF

http://www.zwsoft.com/.../attachment.php?aid=NDQzOHxlYjE0OTMyNXwxNDQwNTU1NzI2fGRhY2ZQS0JMUmFqbXNXamFWSGNwYnFSSjJJWXRNVURHcnQzL3VETElQQ0xTcXcw

Scan Rockey4ND.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.