home

e7ec537f620e417bab1e75002271d03e.dll

MD5:
2c8bc0d4d134299d65048983d0f3cc21

SHA-1:
05531835c952a5f24fb70178c93d2d1c66f01297

SHA-256:
78ae0c0b8430b6088aed9c3a54873bfc0b0f5369b516568fe1a287405898a2d9

Scanner detections:
4 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/19/2024 3:10:37 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Crypt.XPACK.Gen
7.11.30.172

Bkav FE
HW32.CDB
1.3.0.4959

Comodo Security
Heur.Packed.Unknown
19353

Quick Heal
(Suspicious) - DNAScan
8.14.14.00

File size:
91.5 KB (93,696 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\temp\e7ec537f620e417bab1e75002271d03e.dll

File PE Metadata
Compilation timestamp:
11/15/2011 11:58:27 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

CTPH (ssdeep):
1536:wYJTtd/VojKwwoYDJGkrqv2CKfrkzucTbLtQJpG1YQ/yvhMjabHLk+hrN8bo7Kog:ld/yjX2DJG7v5KjkzDftQjGCJvhzDLP8

Entry address:
0x18000

Entry point:
E9, 8F, 04, 00, 00, 77, C8, 20, B1, 1A, DC, 88, D7, F2, 61, 77, C0, 7F, AD, 71, 73, A6, 26, 6B, 09, 63, D4, 92, B0, BA, 0D, 1F, B9, 88, 8D, FC, 32, B6, 8C, 02, 77, 8F, FE, F5, 97, 42, EC, 4A, 6A, 45, 58, C1, B7, 2D, 76, 39, 5B, 7B, 32, C8, A2, 35, 70, F7, 0D, BD, CF, 4F, 81, C5, 45, C9, 24, 53, 7D, 02, 52, 5A, 53, 5B, 7D, 02, 33, C0, BA, 62, 84, 62, 2A, 85, C0, 71, 02, 56, 5E, 51, 59, 81, C5, 07, EA, 13, 46, 53, 5B, 81, C3, E5, D8, B4, 3B, 70, 02, 54, 5C, 52, 5A, 05, 18, 46, 1B, 62, 75, 06, 81, C5, 54, 64...
 
[+]

Entropy:
7.6382

Packer / compiler:
Xtreme-Protector v1.05

Code size:
706.9 MB (741,248,883 bytes)

Scan e7ec537f620e417bab1e75002271d03e.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.