home

EricssonCustomActions.dll

EricssonCustomActions

Microsoft

Publisher:
Microsoft

Product:
EricssonCustomActions

Description:
EricssonCustomActions-R12B

Version:
810.8.12.002

MD5:
3c4b7b8d19d27fa182e47bdd6647eece

SHA-1:
17f6f64fccce1cec0e4dd769729edc45a7424516

SHA-256:
824a796845af55386e58708cb989023683b8786cadf8a75482212a49cb148800

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 9:02:41 PM UTC  (today)

File size:
364 KB (372,736 bytes)

Product version:
810.8.12.002

Copyright:
Copyright © Microsoft 2012

Original file name:
EricssonCustomActions.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\ericssoncustomactions.dll

File PE Metadata
Compilation timestamp:
11/19/2015 1:23:43 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:Zj8LuWil2uS2uF6g744DGsHHCNboE+ZFq4ziTcMhe5KMrmF/7hzBf17MGh+s1keG:XlFBgcYGUYb14qc6eKMrmF/OG7G

Entry address:
0x5C7AE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 10, 00, 00, 00, 18, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 01, 00, 00, 00, 30, 00...
 
[+]

Entropy:
5.7959

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
362 KB (370,688 bytes)

The file EricssonCustomActions.dll has been seen being distributed by the following URL.

https://web.se.wfm.ericsson.net/ClickScheduleWebClient/.../EricssonCustomActions.dll

Scan EricssonCustomActions.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.