The riched20 dll (Rich Text Edit Control, v3 1) Microsoft Corporation File Malware Analysis
Gridinsoft Logo

The riched20.dll (Rich Text Edit Control, v3.1) File Analysis

Updated 9 months ago
Checked by Malware Check
riched20.dll

Technical Analysis

File Name riched20.dll
File Type
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Scanner Version 1.0.210.174
Database Version 2025-03-12 23:00:44 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
612,352
File Size (bytes)
2025-03-12
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
1784500a959adcea288b845eccfd7532
SHA1
54e378552ab0a2626b2435bc1be831913516a851
SHA256
4aa8d583491061ab27019ac1958378462bf952affb747fe90ecefd8ebec21d2f
SHA512
56189adc7f3a5a2127bb298c465657d231aaa5f2a0af7d350099928bf0e53a3d9619c7a7f7b51b2e0b95f20d7078af1e672e515163c3a2bcd83216cee83d9f49
ImpHash
e607e104e910cae194c3cdd527a09e4a

PE Analysis

Basic Information

▼
Image Base 0x180000000
Entry Point 0x1800067d0
Compilation Time 2035-03-19 10:02:57
Checksum 0x000a2df0 (Actual: 0x000a2df0)
OS Version 10.0
PEiD Signatures PE32+ executable (DLL) (GUI) x86-64, for MS Windows
PDB Path riched20.pdb
Digital Signature No valid SignedData structure was found.
Imports 7 libraries
msvcrt, KERNEL32, ADVAPI32, USER32, USP10, GDI32, msls31
Exports 9 functions
Resources 47 Resources
Sections 6 Sections

Version Information

▼
Comments Richedit Version 3.1
CompanyName Microsoft Corporation
FileDescription Rich Text Edit Control, v3.1
FileVersion 5.31.23.1231
InternalName riched20
LegalCopyright Copyright © Microsoft Corp. 1997-2008.
OriginalFilename riched20.dll
ProductName Microsoft RichEdit Control, version 3.1
ProductVersion 3.1
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 489,901 bytes 489,984 bytes 6.38 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 2EF78D1DE49F40362E409FB932844F51
.rdata 0x00079000 53,934 bytes 54,272 bytes 5.09 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ E5C91C729AA288C73CA96657300D6590
.data 0x00087000 4,828 bytes 1,024 bytes 1.29 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 7ECECBFD0AC41A8EEA8C3A9F64388B97
.pdata 0x00089000 19,608 bytes 19,968 bytes 5.69 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8AE75B207EBAFE43BE8BD8844FA12A22
.rsrc 0x0008e000 42,864 bytes 43,008 bytes 4.37 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 19F2A484CE4B4E1C920C02050919F964
.reloc 0x00099000 2,860 bytes 3,072 bytes 5.31 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 798565CC728013DA2FC0B25C0AF0217A

Resource Analysis

▼
Total Resources: 47 (40,284 bytes)
Resource Type Count Total Size Percentage
TYPELIB 1 30,688 bytes
76.2%
RT_CURSOR 21 5,956 bytes
14.8%
RT_BITMAP 7 2,328 bytes
5.8%
RT_GROUP_CURSOR 17 396 bytes
1%
RT_VERSION 1 916 bytes
2.3%

Certificate Chain Analysis

▼
Certificate Information
Product Microsoft RichEdit Control, version 3.1
Description Rich Text Edit Control, v3.1
File Version 5.31.23.1231
Original Name riched20.dll
Internal Name riched20
Copyright Copyright © Microsoft Corp. 1997-2008.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware