home

DTRA.R2.ClickSchedule.dll

Version:
11.8.9467.0

MD5:
eed2f1574c6b2294d9cdc2f08a46923c

SHA-1:
84986b2d07d4365014f8889277d78d0e35d3530a

SHA-256:
65fef900e007d9409fc2e310c88b924d036b95d662cf44e174d4235f75ef6a41

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/31/2024 11:12:16 PM UTC  (a few moments ago)

File size:
29.5 KB (30,208 bytes)

Product version:
11.8.9467.0

Original file name:
DTRA.R2.ClickSchedule.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\dtra.r2.clickschedule.dll

File PE Metadata
Compilation timestamp:
9/29/2015 6:09:20 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:W7dbKqUb/ybHNENrE1WEl4KFM2fp+OcZ2Z7HVKRy12DcwXvS4kAeC:MdlG/UE9EWK6Ybn5+mcfjiC

Entry address:
0x8CCE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.4863

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
27.5 KB (28,160 bytes)

The file DTRA.R2.ClickSchedule.dll has been seen being distributed by the following 3 URLs.

https://dtra-spd-connect.internal.ericsson.com/ClickScheduleWebClient/.../DTRA.R2.ClickSchedule.dll

http://172.29.60.136/clickschedulewebclient/.../DTRA.R2.ClickSchedule.dll

https://dtra-web-so.internal.ericsson.com/ClickScheduleWebClient/.../DTRA.R2.ClickSchedule.dll

Scan DTRA.R2.ClickSchedule.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.