home

14601_nvi2.dll

MD5:
d67a756edfed3e564b782809e7ceb3a3

SHA-1:
336abb46603f67b62d5c5efdc8e0d5e0344c8bd9

SHA-256:
5ba8644cb2ff65f8fe492ba578d73c9115223958bf30ce68d4d764d4293e5c89

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 3:52:09 AM UTC  (today)

File size:
4.2 KB (4,345 bytes)

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\users\{user}\downloads\14601_nvi2.dll

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
96:+1UiwCjtIocgNCc1orJ6OYKddUa10bnuY1UfyUYwCAIuTksU:+iiBIGIdiO07HyfNYwXIuTa

Entry point:
3C, 68, 74, 6D, 6C, 3E, 0A, 3C, 68, 65, 61, 64, 3E, 3C, 74, 69, 74, 6C, 65, 3E, 44, 6F, 77, 6E, 6C, 6F, 61, 64, 20, 66, 69, 6C, 65, 20, 6E, 76, 69, 32, 2E, 64, 6C, 6C, 3C, 2F, 74, 69, 74, 6C, 65, 3E, 0A, 3C, 6D, 65, 74, 61, 20, 6E, 61, 6D, 65, 3D, 22, 64, 65, 73, 63, 72, 69, 70, 74, 69, 6F, 6E, 22, 20, 63, 6F, 6E, 74, 65, 6E, 74, 3D, 22, 22, 3E, 0A, 3C, 6D, 65, 74, 61, 20, 6E, 61, 6D, 65, 3D, 22, 6B, 65, 79, 77, 6F, 72, 64, 73, 22, 20, 63, 6F, 6E, 74, 65, 6E, 74, 3D, 22, 22, 20, 2F, 3E, 20, 0A, 3C, 6D, 65...
 
[+]

Entropy:
5.4320

The file 14601_nvi2.dll has been seen being distributed by the following URL.

http://api.256file.com/.../14601_nvi2.dll

Scan 14601_nvi2.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.