Should I block it?

45%

45% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

1, 0, 0, 1	50.00%
1, 0, 0, 1	12.50%
1, 0, 0, 1	12.50%
1, 0, 0, 1	12.50%
1, 0, 0, 1	12.50%

(Note, ReSoft LTD. publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

PE file structure

Show functions

Import table

kernel32.dll

GetModuleFileNameW, GetLastError, OutputDebugStringW, OutputDebugStringA, Beep, GetProcessHeap, SetEndOfFile, CreateFileW, WriteConsoleW, SetStdHandle, LoadLibraryW, FreeLibrary, HeapReAlloc, IsValidLocale, EnumSystemLocalesA, GetLocaleInfoA, GetUserDefaultLCID, WideCharToMultiByte, InterlockedIncrement, InterlockedDecrement, InterlockedCompareExchange, InterlockedExchange, MultiByteToWideChar, GetStringTypeW, EncodePointer, DecodePointer, Sleep, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, HeapFree, GetCPInfo, GetCurrentThreadId, GetCommandLineA, RaiseException, RtlUnwind, HeapAlloc, LCMapStringW, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, IsProcessorFeaturePresent, SetHandleCount, GetStdHandle, InitializeCriticalSectionAndSpinCount, GetFileType, GetStartupInfoW, HeapCreate, HeapDestroy, GetProcAddress, GetModuleHandleW, ExitProcess, ReadFile, SetFilePointer, WriteFile, GetConsoleCP, GetConsoleMode, FlushFileBuffers, GetLocaleInfoW, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, SetLastError, CloseHandle, GetACP, GetOEMCP, IsValidCodePage, GetModuleFileNameA, FreeEnvironmentStringsW, GetEnvironmentStringsW, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, HeapSize, VirtualQuery

shell32.dll

ShellExecuteA

shlwapi.dll

PathRemoveFileSpecW

user32.dll

DestroyWindow, RegisterClassExA, CreateWindowExA, DefWindowProcA, RegisterWindowMessageA, SendMessageTimeoutA, FindWindowA, SetWindowLongA

Export table

NP_GetEntryPoints

NP_Initialize

NP_Shutdown

googlechromeremoteplugin.dll

GoogleChromeRemotePlugin by ReSoft LTD. (Signed)

Remove googlechromeremoteplugin.dll

Version:	1, 0, 0, 1
MD5:	7714bd79c9df58184615a7bf2a88e8d3
SHA1:	2158217da70937472eef58edc727bfe5c058f3be
SHA256:	7d6458da9d9f9a2a6c39ffd98fc4751d886bd3acbb8f98510e3f7441fc6f5605

Overview

googlechromeremoteplugin.dll is loaded as dynamic link library that runs in the context of the Google Chrome web browser. This is typically installed with the program Snap.Do published by ReSoft Ltd. and is most likely removed by most users once installed (85% removed). The file is digitally signed by ReSoft LTD. which was issued by the COMODO CA Limited certificate authority (CA).

Details

File name:	googlechromeremoteplugin.dll
Product name:	GoogleChromeRemotePlugin
Description:	nprt
Typical file path:	C:\users\user\appdata\local\google\chrome\user data\default\extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\googlechromeremoteplugin.dll
Original name:	nprt.dll
File version:	1, 0, 0, 1
Size:	166 KB (169,984 bytes)
Build date:	2/27/2013 10:39 PM
Certificate
Issued to:	ReSoft LTD.
Authority (CA):	COMODO CA Limited
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following program will install this file

Snap.Do

ReSoft Ltd.

85% remove

Snap.Do is a web browser addin/toolbar (depending on the browser it is installed within) that plugs into all the major web browsers including Internet Explorer, Chrome and Firefox. Snap.Do provides the standard generic toolbar features such as social integration for Facebook and Twitter as well as others. It also leverages the SimularSites engine to provide "recommendations". On installation it will modify the browser's home page and se...