Should I block it?
No, this file is 100% safe to run.
Additional versions
(Note, the developer publishes each variation of this file with the same version, but the hashes are unique.)
 PE file structure
|
Show functions |
Import table
kernel32.dll
HeapReAlloc, lstrcpynA, MultiByteToWideChar, GlobalFree, GlobalAlloc, lstrcmpiA, HeapAlloc, GetProcessHeap, lstrcpyA
ole32.dll
CreateFileMoniker, GetRunningObjectTable, OleSetContainedObject, OleCreate, OleInitialize
user32.dll
SendMessageA, GetClassNameA, EnumChildWindows, UpdateWindow, ShowWindow, MoveWindow, BeginPaint, SetLayeredWindowAttributes, DispatchMessageA, TranslateMessage, GetMessageA, PeekMessageA, CreateWindowExA, SetFocus, IsDialogMessageA, RegisterClassExA, RegisterClassA, GetClassInfoA, wsprintfA, wvsprintfA, SetWindowLongA, GetWindowLongA, GetClientRect, DestroyWindow, DefWindowProcA, EndPaint, CreateDialogParamA
wininet.dll
InternetAttemptConnect
Export table
Activate
CreateNestedBrowserTagged
DetachNestedBrowser
DoEvents
EnableLayeredWindow
GetBrowserWindow
GetNestedIDispatch
IsInet
NotifyReady
OleInit
ReleaseNestedIDispatch
SetExternalObject
Show
SingleBrowser
customnsweb.dll
| MD5: | f5df7ac1a25795cbaca7244729763a0e |
| SHA1: | 4ff505d408835ad8bfa749165d193d8f1baabe9a |
| SHA256: | a1ba1b756f59f3b2f60f8448eb7754002020fcd81b92c78bc207858e6d96b9f9 |
Overview
customnsweb.dll is loaded as dynamic link library that runs in the context of a process.
Details
| File name: | customnsweb.dll |
| Typical file path: | C:\users\user\appdata\local\temp\nsdedcb.tmp\customnsweb.dll |
| Size: | 24.5 KB (25,088 bytes) |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| .NET CLR: | No |
More details
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate N |
50.00% |
|
| Microsoft Windows XP |
25.00% |
|
| Windows 7 Ultimate |
25.00% |
|
Distribution by country
United States installs about 75.00% of customnsweb.dll.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
100.00% |
|
