home

Wfs.RemoteCapture.dll

Version:
3.3.3.66

MD5:
71afe36bce5d1630eeec3328fe093c1b

SHA-1:
886726daf84af2209e84cbcd9bdbe2a9c353a3d5

SHA-256:
e405f01e8aa709634aed0b72d3e3bd935e966534463c664b58699f42fed185e4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 3:32:14 PM UTC  (today)

File size:
668 KB (684,032 bytes)

Product version:
3.3.3

Original file name:
Wfs.RemoteCapture.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\wfs.remotecapture.dll

File PE Metadata
Compilation timestamp:
2/26/2013 12:29:08 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:ycAHc3LbTHUfqI/PU5vCSGIbYXIVyJF1e8qTN4QOrN7bde95KHV3+hZTpASWTi:DAHc3/THOAbI85KHo

Entry address:
0xA59FE

Entry point:
FF, 25, 00, 20, 00, 11, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.6695

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
656 KB (671,744 bytes)

The file Wfs.RemoteCapture.dll has been seen being distributed by the following URL.

https://dpm.53.com/.../Wfs.RemoteCapture.DLL

Scan Wfs.RemoteCapture.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.