home

warface trippy project v8.0_[www.unknowncheats.me]_.dll

MD5:
5456d6d4914f42ca522539253598b300

SHA-1:
f4e3b1224e597f5081005de6433c0beea89b26e3

SHA-256:
f7d06c61e40f31409b391ce0370adaa0e2cf3bba8c5aa4811c6c055366278f50

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/12/2024 8:15:26 AM UTC  (today)

File size:
41 KB (41,984 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\downloads\warface trippy project v8.0_[www.unknowncheats.me]_.dll

File PE Metadata
Compilation timestamp:
4/13/2016 12:19:45 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
768:8Py0l+u7r/WPgingiyIi9Yz1jD35t/1/WNGX1Ba+rt6u6lcmTbCCCCheIXvvrus7:8tH/QvnvyH9Ib/14GX1BP2JCCeIXCsPz

Entry address:
0x6C74

Entry point:
55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, BC, 05, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, B1, FE, FF, FF, 83, C4, 0C, 5D, C2, 0C, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 6A, 00, FF, 15, 18, 80, 00, 10, FF, 75, 08, FF, 15, 14, 80, 00, 10, 68, 09, 04, 00, C0, FF, 15, 10, 80, 00, 10, 50, FF, 15, 30, 80, 00, 10, 5D, C3, 55, 8B, EC, 81, EC, 24, 03, 00, 00, 6A, 17, E8, 48, 07, 00, 00, 85, C0, 74, 05, 6A, 02, 59, CD, 29, A3, 80, B2, 00, 10, 89, 0D, 7C, B2, 00, 10, 89, 15, 78, B2, 00, 10, 89, 1D...
 
[+]

Entropy:
6.1795

Developed / compiled with:
Microsoft Visual C++

Code size:
25.5 KB (26,112 bytes)

The file warface trippy project v8.0_[www.unknowncheats.me]_.dll has been seen being distributed by the following 6 URLs.

http://www.unknowncheats.me/.../downloads.php?do=file&id=17149&act=down&actionhash=1474217385-2b8bab16ea24a033323b2075ae0313b8b74d4085

http://www.rlhackers.net/forum/applications/core/interface/.../attachment.php?id=5257

http://www.unknowncheats.me/.../downloads.php?do=file&id=17149&act=down&actionhash=1476095661-da312d57284bf0a705c5424a60ad9ffd6d26d39c

http://www.unknowncheats.me/.../downloads.php?do=file&id=17149&act=down&actionhash=1472170186-b9565c2b68cbf5262001631254d0a7cde991f08b

http://www.unknowncheats.me/.../downloads.php?do=file&id=17149&act=down&actionhash=1468224037-03ea91eb075078ab6a55a24ee9bbd4d8f18b7721

http://www.unknowncheats.me/.../downloads.php?do=file&id=17149&act=down&actionhash=1461411125-2c90d53cfbf441e7d9ecec7f94e8b5225b16c7d5

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.