home

api-ms-win-downlevel-user32-l1-1-0.dll

MD5:
620f0b67a91f7f74151bc5be745b7110

SHA-1:
1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d

SHA-256:
ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 4:27:56 PM UTC  (today)

File size:
4 KB (4,096 bytes)

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\windows\temp\185f78e5-49d6-401c-87d0-841cbe320504\x86_microsoft-windows-d..evelapisets-windows_31bf3856ad364e35_7.1.7601.16492_none_862b61bc350b5a4b\api-ms-win-downlevel-user32-l1-1-0.dll

File PE Metadata
OS bitness:
Win64

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, C0, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

The file api-ms-win-downlevel-user32-l1-1-0.dll has been discovered within the following programs.

Application Profiles  by Advanced Micro Devices, Inc.
Publisher's description - “This program for AMD Catalyst™delivers support for the latest AMD CrossFireX and AMD Enduro profiles in a separate executable file ensuring users have access to the absolute latest set of profiles installed on their PC.”
www.amd.com
5% remove it
Octoshape Streaming Services  by Octoshape ApS
Publisher's description - “Octoshape technologies are focused on actually fixing the reliability and sustainability of video quality over the Internet and not just adjusting to varying conditions.”
www.octoshape.com
26% remove it
 
Powered by Should I Remove It?

The file api-ms-win-downlevel-user32-l1-1-0.dll has been seen being distributed by the following 3 URLs.

https://attachment.outlook.office.net/owa/jplmoraes@outlook.com/service.svc/s/.../4SrhgHAEXOzN2Idw5PhfNrnJEQCzwAAAIBDAAAAEXOzN2Idw5PhfNrnJEQCzwAAAA77xliAAAAARIAEADc5vreFQW5Q4wz rWjB4j5&X-OWA-CANARY=9TqxqM53rEK0AtjNrj-hb8COz0umP9MYaBhD9mBocTRlvY1pixna1Vs4NXTUfdqPQvrfWpsMOvA.&token=7f8bb9fb-9532-48ec-ab5e-1641422792df&owa=outlook.live.com

http://d2bn845ieoq8t2.cloudfront.net/prepreinstaller_win.exe

http://www.anyprotect.com/ui/.../AnyProtect.exe

Scan api-ms-win-downlevel-user32-l1-1-0.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.