home

Wfs.ScanUtilities.dll

Version:
3.2.2.2

MD5:
ba5eb8522608fb9b0b71359fff3dc0c0

SHA-1:
a9193b47924bf90f07761566209e7027d8f88ed3

SHA-256:
0a4e123253439fb031c2b7e92a4ae94c3602e5367edf9809637998c6f98f3ee2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 12:03:33 PM UTC  (today)

File size:
24 KB (24,576 bytes)

Product version:
3.2.2

Original file name:
Wfs.ScanUtilities.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\assembly\dl3\waqo60kj.7c4\vbwl97c1.7et\044b1dc0\00c75bbe_8f6ccb01\wfs.scanutilities.dll

File PE Metadata
Compilation timestamp:
10/15/2010 11:38:12 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
192:c0P0526vW2g/qsnT02+i8SYr1oGfWh5i/vzBGw2q9a2kC6XuukTz1jO0dt:cw0526e2g/qgf8SYooVTm6u6z1a0f

Entry address:
0x4FEE

Entry point:
FF, 25, 00, 20, 00, 11, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 10, 00, 00, 00, 18, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 01, 00, 00, 00, 30, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 48, 00, 00, 00, 58, 60, 00, 00, F8, 02, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, F8, 02, 34, 00, 00, 00, 56, 00, 53, 00, 5F, 00, 56, 00, 45, 00, 52, 00, 53, 00, 49, 00...
 
[+]

Entropy:
3.6043

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
12 KB (12,288 bytes)

The file Wfs.ScanUtilities.dll has been seen being distributed by the following 3 URLs.

https://busdepcap.comerica.com/.../Wfs.ScanUtilities.DLL

https://digitalexpress.tdbank.com/.../Wfs.ScanUtilities.DLL

https://dpm.53.com/.../Wfs.ScanUtilities.DLL

Scan Wfs.ScanUtilities.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.