home

asshurt.dll

MD5:
3a1b075c4f97915286586fc3ca656e31

SHA-1:
24e5365fafe16174c4761bba43d1bffe707a96ff

SHA-256:
b3b595fb87ebd7bf00e5d06bc6b75fe95070700b9f65157f505e51153d6da055

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 2:21:04 AM UTC  (today)

File size:
213.5 KB (218,624 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\downloads\asshurt.dll

File PE Metadata
Compilation timestamp:
4/5/2016 6:04:14 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
6144:wKxkB3YRGTXH3nnhbBLGL8aywJZzKRloiERBdi0a1r:wKxkiRGrXvSPZuXj0a1r

Entry address:
0x22CD4

Entry point:
55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 74, 05, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, B1, FE, FF, FF, 83, C4, 0C, 5D, C2, 0C, 00, FF, 25, 0C, 82, 02, 10, 55, 8B, EC, 6A, 00, FF, 15, 64, 80, 02, 10, FF, 75, 08, FF, 15, 68, 80, 02, 10, 68, 09, 04, 00, C0, FF, 15, 7C, 80, 02, 10, 50, FF, 15, 78, 80, 02, 10, 5D, C3, 55, 8B, EC, 81, EC, 24, 03, 00, 00, 6A, 17, E8, D3, 06, 00, 00, 85, C0, 74, 05, 6A, 02, 59, CD, 29, A3, 48, 34, 03, 10, 89, 0D, 44, 34, 03, 10, 89, 15, 40, 34, 03, 10, 89, 1D, 3C, 34, 03...
 
[+]

Entropy:
6.5543

Developed / compiled with:
Microsoft Visual C++

Code size:
153 KB (156,672 bytes)

The file asshurt.dll has been seen being distributed by the following URL.

https://ln.sync.com/mfs/p/asshurt.dll?cachekey=38f45aebe722a1556383fa8f772f565cf127d73c0f1a8090f48c85e4d487e6204&linkcachekey=7713ec2c0&datakey=hH04g43xUfILe6wATqPJ2ZWBsB9c0i8xlfVhNzlQS 6KAAT/ eh3Ere2SOzn2TRAdh PTMc0h5EMh/xh29noouuBXo39LELZvp9U9wwVC0vKSe9z4rW4Yu 2NpRUQ90NGCpyikJw2Ux53sz5OZBkaH359y8qp0l18AZ6oUyZmooaIvHrHBxgd1SCG/.../n9i98n0CZO0HSaC8fZwj81DuUti8i1Uo5CBWXTBuzw&mode=100&header1=Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9vY3RldC1zdHJlYW0&header2=Q29udGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9ImFzc2h1cnQuZGxsIg

Scan asshurt.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.