home

coredll.dll

MD5:
3e020a0c288b2d988fa64525e3c4d56a

SHA-1:
168be6f213f921f63a868cd21bd0e8fe96d570bc

SHA-256:
8e5495b1dae3b8dba656923af98a60a7d55b2bbe094f3ddb0fe705db9751038a

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
11/27/2024 5:42:27 AM UTC  (today)

Scan engine
Detection
Engine version

AegisLab AV Signature
Troj.W32.Gen
2.1.4+

ViRobot
Trojan.Win32.A.ShipUp.20480.H
2011.4.7.4223

File size:
20 KB (20,480 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\ea games\battlefield 2\coredll.dll

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
24:e1GSL2RFKTJlNGXjScSVu5qUSX1sCBC6Utbv8RVGq/89bo:SLOFKzNVcGu5qU81N1pGQ8m

Entry address:
0x1008

Entry point:
33, C0, 40, C3, CC, CC, CC, CC, B0, 01, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, B8, 3F, E3, 47, 00, C3, 8B, 44, 24, 08, 85, C0, 75, 0E, 39, 05, 14, 30, 00, 10, 7E, 2E, FF, 0D, 14, 30, 00, 10, 83, F8, 01, 8B, 0D, 0C, 20, 00, 10, 8B, 09, 89, 0D, 18, 30, 00, 10, 75, 4F, 68, 80, 00, 00, 00, FF, 15, 08, 20, 00, 10, 85, C0, 59, A3, 20, 30, 00, 10, 75, 04, 33, C0, EB, 79, 83, 20, 00, A1, 20, 30, 00, 10, A3, 1C, 30, 00, 10, E8, 8C, 01, 00, 00, 68, 4A, 12, 00, 10, E8, 70, 01, 00, 00, C7, 04, 24, 04...
 
[+]

Entropy:
0.7852

Code size:
4 KB (4,096 bytes)

The file coredll.dll has been discovered within the following programs.

Allied Intent Xtended 2.0  by AIX Community
aixtended.com
About 3% of users remove it
Battlefield 2 version Battlefield 2  by V.N.V. Inc.
www.vnvsoft.ir
About 6% of users remove it
Battlefield 2 Weapons Unlocker  by RBSoft, Inc.
www.rbsoft20.co.cc
About 9% of users remove it
HP Games  by WildTangent
HP Games is preinstalled with most Hewlett-Packard computers. This is an HP branded gaming console around WildTangent. If you do not play WildTangent games or do not wish to use the trail versions you may uninstall this software.
www.wildtangent.com/?dp=hpdesktop
20% remove it
Medal of Honor Pacific Assault(tm)  by Electronic Arts
Medal of Honor Pacific Assault is a video game distributed through EA's Origin digital distribution and digital rights management content delivery system.
www.ea.com
5% remove it
 
Powered by Should I Remove It?

The file coredll.dll has been seen being distributed by the following 2 URLs.

http://s6541.chomikuj.pl/File.aspx?e=_VzJfJUs8phcD3iYuJZcUKVjxLc9Ol8eM_7Vhnw-aCcTny38Vm41ryI25BZdYnYRa8vhRvWvD4JDmjYxRI9fuGwZu3kxXpuigFL-Ph_84c2COdMUHfqFgr1rG7fSaKtK&pv=2

http://s10095.chomikuj.pl/File.aspx?e=_VzJfJUs8phcD3iYuJZcUGHMjO3RiWBjPaXGa-pHerS5LJ5iV0KuHlF7prTkmbDXa3TqXCMvLXUajHICe1j-iYpgDvYKSQ6_zHevU_Gw_3VgO8zkUKk0StSUCOW6knqo&pv=2

Scan coredll.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.