Wfs.RemoteCapture.dll

Version:
4.0.1.312

MD5:
02cd78f32b9c81dfb00f4b3670e9acee

SHA-1:
b40e6dab5f09594c53e8902dbcbeba01b0bdca98

SHA-256:
41474f044e1fbf577a6122e09825ef083ce3e25cbc24523b496efff12652ded1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 4:34:38 PM UTC  (today)

File size:
760 KB (778,240 bytes)

Product version:
4.0.1

Original file name:
Wfs.RemoteCapture.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\wfs.remotecapture.dll

File PE Metadata
Compilation timestamp:
4/3/2014 1:26:13 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:XBlBUKgTSnzakK87wKJyKd7PmucNK8yJAN49jhDazMsOjmkBN4Fhdj0mxYm3jASk:/SIUKwAM3L0NB

Entry address:
0xBC71E

Entry point:
FF, 25, 00, 20, 00, 11, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.6079

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
748 KB (765,952 bytes)

The file Wfs.RemoteCapture.dll has been seen being distributed by the following URL.

Scan Wfs.RemoteCapture.dll - Powered by Reason Core Security