Gridinsoft Logo

The riched20.dll (Rich Text Edit Control, v3.1) File Analysis

Updated 2 minutes ago
Checked by Malware Check
riched20.dll

Technical Analysis

File Name riched20.dll
File Type
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Scanner Version 1.0.220.174
Database Version 2025-07-19 03:00:29 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
737,280
File Size (bytes)
2025-07-19
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
31197493d840260d609a08453e6121b0
SHA1
a4a0dd1a6aa282801872c793d2577c6048486ca3
SHA256
29d8beacd801ec80bb6aab6cc8dc984bcd4a3fb80002bdb43f14e188454dd12b
SHA512
c56a1d2253d04510d7a0bae180b0600dbfa2a3410869eadd9d278bf1ba5280817e0272ddc140055de3ea1a0c200b986b5abc4a026d3f7362f11ee2f630b31c73
ImpHash
e607e104e910cae194c3cdd527a09e4a

PE Analysis

Basic Information

▼
Image Base 0x180000000
Entry Point 0x1800499d0
Compilation Time 2065-02-18 18:12:37
Checksum 0x000bd70b (Actual: 0x000bd70b)
OS Version 10.0
PEiD Signatures PE32+ executable (DLL) (GUI) x86-64, for MS Windows
PDB Path riched20.pdb
Digital Signature No valid SignedData structure was found.
Imports 7 libraries
msvcrt, KERNEL32, ADVAPI32, USER32, USP10, GDI32, msls31
Exports 9 functions
Resources 47 Resources
Sections 7 Sections

Version Information

▼
Comments Richedit Version 3.1
CompanyName Microsoft Corporation
FileDescription Rich Text Edit Control, v3.1
FileVersion 5.31.23.1231
InternalName riched20
LegalCopyright Copyright © Microsoft Corp. 1997-2008.
OriginalFilename riched20.dll
ProductName Microsoft RichEdit Control, version 3.1
ProductVersion 3.1
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 583,102 bytes 585,728 bytes 6.40 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 040D8EA74E380F805C340258A2CD7C9D
fothk 0x00090000 4,096 bytes 4,096 bytes 0.02 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 34187A247B144EF90FF9E90008FECAC3
.rdata 0x00091000 63,838 bytes 65,536 bytes 5.15 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9CE99D09579FB973491B7346470D58A6
.data 0x000a1000 4,960 bytes 4,096 bytes 0.41 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 3AB494855A5FD0E2B1D16C92A3989736
.pdata 0x000a3000 23,976 bytes 24,576 bytes 5.80 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ EE67223B18C97D6616DB8BEA43E79985
.rsrc 0x000a9000 42,864 bytes 45,056 bytes 4.23 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9548E88D9EED3C0F39B53FF7A33921C5
.reloc 0x000b4000 2,960 bytes 4,096 bytes 4.61 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ F37B14F01CBDB3E3F2740B6221B61E63

Resource Analysis

▼
Total Resources: 47 (40,284 bytes)
Resource Type Count Total Size Percentage
TYPELIB 1 30,688 bytes
76.2%
RT_CURSOR 21 5,956 bytes
14.8%
RT_BITMAP 7 2,328 bytes
5.8%
RT_GROUP_CURSOR 17 396 bytes
1%
RT_VERSION 1 916 bytes
2.3%

Certificate Chain Analysis

▼
Certificate Information
Product Microsoft RichEdit Control, version 3.1
Description Rich Text Edit Control, v3.1
File Version 5.31.23.1231
Original Name riched20.dll
Internal Name riched20
Copyright Copyright © Microsoft Corp. 1997-2008.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware