home

customcheats_alphaz_[www.unknowncheats.me]_.dll

MD5:
ad0384f0f89afce17fbbf536c2ab2fc5

SHA-1:
dc23b428d41a7d32d0f766e37ce52b6541cd8473

SHA-256:
bc6174267a2d591a06e29d0951a430ed9f290a2dc67a467ca382807db43a0aab

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/28/2024 12:27:47 AM UTC  (today)

File size:
391 KB (400,384 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\downloads\customcheats_alphaz_[www.unknowncheats.me]_.dll

File PE Metadata
Compilation timestamp:
1/24/2015 11:51:44 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:P4KwSIO5V4UcgnxJnPEML51v0SaeT5rK8fh3ZPtRcah5m:P2SIOY6O45rK8fh3DRk

Entry address:
0x26C53

Entry point:
E9, 68, 3D, 04, 00, E9, CD, 33, 04, 00, E9, 8E, 71, 00, 00, E9, B9, 5C, 04, 00, E9, 04, 4A, 04, 00, E9, 07, 34, 04, 00, E9, 8A, EE, 03, 00, E9, 85, 92, 02, 00, E9, A0, AE, 00, 00, E9, 2B, 44, 02, 00, E9, CC, 2B, 04, 00, E9, A1, 95, 02, 00, E9, DC, 2D, 04, 00, E9, 57, 3A, 02, 00, E9, 92, C4, 01, 00, E9, 0D, 11, 01, 00, E9, 3E, 2C, 04, 00, E9, 53, 8A, 02, 00, E9, C4, 2C, 04, 00, E9, D9, B9, 02, 00, E9, E4, 68, 00, 00, E9, FF, E9, 00, 00, E9, 5A, 39, 04, 00, E9, 67, 29, 04, 00, E9, 80, A9, 00, 00, E9, FB, 72...
 
[+]

Entropy:
5.5906

Developed / compiled with:
Microsoft Visual C++ 8.0 (Debug)

Code size:
320.5 KB (328,192 bytes)

The file customcheats_alphaz_[www.unknowncheats.me]_.dll has been seen being distributed by the following 3 URLs.

http://www.unknowncheats.me/.../downloads.php?do=file&id=13609&act=down&actionhash=1463543897-3cfaea06e67a27e632fc7ae5dda3045de1b37915

http://www.unknowncheats.me/.../downloads.php?do=file&id=13609&act=down&actionhash=1437864070-f3a7e2f9f1f647811ebfba945bc088f99d821f84

http://www.oldschoolhack.de/downloads/.../decfd70f6b1faf7fdab20cce16a54048

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.