home

bitool.dll

MD5:
6d645a47fc3ccff3f617f11b85f5d15a

SHA-1:
d3d18bbcdaed50a94c484c1470eb01fbf02dd0ce

SHA-256:
8f859d4b166c947ec4e6d9fdc3a0dce43710c4d4dc125eec60457d712f03bd8c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 3:58:18 AM UTC  (today)

File size:
5.6 KB (5,688 bytes)

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\bitool.dll

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
96:PUMisY8LP4wEz7yMhtjv9cC4dLddSbTLTKb4185NVp2R/5Gxg23VjUlha94M:PHix8iyMrj6938LWM1Y2uxg2xGhah

Entry point:
78, AA, 31, 00, 55, 95, 11, 9E, 27, 0F, 1F, 1C, DF, 3A, 9B, 82, 68, 30, C0, 4A, 61, 1D, F1, 2F, 0E, FA, BE, 79, F7, A5, 23, EF, 55, 51, 96, 84, CD, DB, E3, B9, 6E, 3E, 31, D8, 0A, 20, 67, C7, F4, D9, BF, 94, EB, 47, 04, 3E, 02, CE, 2A, A2, 5D, 87, 04, 09, F6, 30, 9D, 18, 8A, 97, B2, AA, 1C, FC, 41, D2, A1, 36, CB, FB, 3D, 91, BA, E7, D9, 70, 35, FA, E4, E7, 90, C3, 9B, A3, 9B, D3, 3C, F5, 12, 99, 77, B1, B7, 09, E0, 68, E6, 1C, B8, F3, 94, 63, 88, 6A, 6A, FE, 0B, 76, C9, BE, F4, 22, E4, 67, B9, AB, 1A, 5E...
 
[+]

The file bitool.dll has been seen being distributed by the following URL.

http://cdn.bisrv.com/sdk/binsis/.../BiTool.dll

Scan bitool.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.