» esswsp_wvfgfalb_890000.dll
Overview
Analysis
File Details

esswsp_wvfgfalb_890000.dll

2345.com

File name:

Publisher:

2345.com (signed and verified)

Description:

辅助模块

Version:

1.0.1.109

MD5:

35b055f8f279b0fc0cfd1e412d584812

SHA-1:

c5765191cca8ec231f793e35fec69ab5b6fa3c79

SHA-256:

0f2af0984d9cab793eb8d805e502233b7c6235d95b438a5cd28f6f1a93a0c6e0

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/27/2024 5:13:34 AM UTC (today)

File size:

1.2 MB (1,226,416 bytes)

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\esswsp_wvfgfalb_890000.dll

Digital Signature

Signed by:

2345.com

Authority:

Symantec Corporation

Valid from:

2/23/2016 8:00:00 AM

Valid to:

9/3/2017 7:59:59 AM

Subject:

CN=2345.com, OU=桌面软件事业部, O=2345.com, L=shanghai, S=shanghai, C=CN

Issuer:

CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

21239686F66CB0BC1121E5788723628A

File PE Metadata

Compilation timestamp:

3/3/2017 2:29:13 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

12.0

Entry address:

0x2A3B7C

Entry point:

68, BA, 91, 31, 6C, E8, 7B, D0, EF, FF, 8B, 4C, 25, 00, 1A, C1, 8A, 44, 25, 04, 66, 81, FD, 1C, 7E, 66, F7, C7, DE, 11, 8D, AD, 06, 00, 00, 00, F7, C5, ED, 31, 86, 43, 36, 88, 01, 8D, B6, FC, FF, FF, FF, 80, CC, 9A, 66, 1B, C2, 8B, 06, F9, 66, 81, FA, 26, 6A, F5, 33, C3, 40, F5, E9, 84, DF, FF, FF, 0F, 84, EF, 3E, F0, FF, 5F, 0F, CB, 66, 0F, BB, DB, 81, FE, F8, 12, D6, 6F, 5E, D2, C7, 5B, F8, F5, 3A, C8, E9, 0A, 05, FB, FF, 8B, 4C, 25, 00, 40, 66, C1, C8, 9A, F7, C4, 5C, 4E, C3, 43, 8B, 44, 25, 04, 3B, FD... 
[+]

Entropy:

7.9766 (probably packed)

Code size:

594.5 KB (608,768 bytes)

Scan esswsp_wvfgfalb_890000.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.