home

ca2.dll

MD5:
d4e8012aa0301166fb2d54de9248182b

SHA-1:
b3fc53efa9e15bc00adb92da6e91acf7a5a34052

SHA-256:
d6365aa5593f990c08be155096e2838aee5d22cd35d3d42e7e49a0ea9e9832d5

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
12/26/2024 5:58:23 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
Win32/Blacked
2015.0.4477

File size:
153 KB (156,672 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\ca2.dll

File PE Metadata
Compilation timestamp:
11/6/2015 10:46:08 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3072:4SiyLXmO7xxg9q82CZdlq/h5b/B2nMJ80vKbTz71dnD+N+kh:LiyLbxtEZwzD2My0SrBdnKN+kh

Entry address:
0x2B209

Entry point:
E8, 3F, 5D, 00, 00, 89, 4D, F8, 66, 89, 44, 24, 08, 8D, 64, 24, 28, E9, 30, 74, 00, 00, 2D, B8, 0B, 07, 1C, 06, 0F, F4, 89, EB, 02, DD, CC, 5D, 15, B0, 93, 07, BA, 38, CB, 7F, 9D, F6, 4C, DB, 37, 32, 91, 81, 90, 16, B5, 55, C4, 26, 15, CD, 43, 2C, BA, DE, 4C, AA, CE, E0, 25, 25, 45, 07, AE, F8, 52, 1E, 5D, 23, 0F, 3E, 6C, EF, D3, 85, BA, 21, 1C, D8, 1B, D3, 83, 00, 53, 33, 09, 66, F0, 11, F5, 38, 22, 2E, 1F, 57, CF, BE, 78, 24, 67, 9F, 7E, 8C, D0, 68, 4E, 50, 36, E5, 7D, CD, 77, 39, 06, C4, D3, 1B, 95, 81...
 
[+]

Code size:
38 KB (38,912 bytes)

The file ca2.dll has been seen being distributed by the following URL.

http://engenhariatm.com/loader/.../ca2.dll?n20

Scan ca2.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.