home

wrapperutils.dll

The WrapperUtils is a Crossrider web browser extension platform) installation plugin for NSIS (Nullsoft installer) that is included with the program's installer package. The module wrapperutils.dll has been detected as adware by 16 anti-malware scanners. It is also typically executed from the user's temporary directory.
MD5:
b470ffbf0f6b4b6a25538cf700b23ab3

SHA-1:
99d6c367786f132004469b245c7e717669d1c296

SHA-256:
711db5c046889d2940756c3df0e12302d3fc3e9886f89e011be753415706e37f

Scanner detections:
16 / 68

Status:
Adware

Analysis date:
4/19/2024 10:21:02 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Adware.Generic.912657
1022

Agnitum Outpost
PUA.Agent
7.1.1

Baidu Antivirus
Adware.Win32.Agent
4.0.3.14418

Bitdefender
Adware.Generic.912657
1.0.20.540

Emsisoft Anti-Malware
Adware.Generic.912657
8.14.04.18.06

ESET NOD32
Win32/Packed.ScrambleWrapper
8.9671

Fortinet FortiGate
Adware/Agent
4/18/2014

F-Secure
Adware.Generic.912657
11.2014-18-04_6

G Data
Adware.Generic.912657
14.4.24

IKARUS anti.virus
not-a-virus:AdWare.Win32.Agent
t3scan.1.6.1.0

K7 AntiVirus
Trojan
13.176.11737

Kaspersky
not-a-virus:AdWare.Win32.Agent
14.0.0.3996

MicroWorld eScan
Adware.Generic.912657
15.0.0.324

Trend Micro House Call
TROJ_GEN.R047H07CQ14
7.2.108

Vba32 AntiVirus
AdWare.Agent
3.12.26.0

VIPRE Antivirus
Adware.Agent
28214

File size:
69.5 KB (71,168 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\wrapperutils.dll

File PE Metadata
Compilation timestamp:
3/10/2014 3:16:27 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
768:txhYSu8w6tfnKlW0V/LE4yalemRlIFzq80vNKrJcSWJi6esWjcd24no1FmEpSm:t4wfnKl9RAWIPJcS1sWjcduFdS

Entry address:
0x1D62

Entry point:
55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 72, 3F, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, 00, F7, 00, 10, E8, CF, 10, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 04, 1F, 01, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, 34, B2, 00, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
37.5 KB (38,400 bytes)

Remove wrapperutils.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.