home

dxgi.dll

MD5:
8e44b300120abe23bbce503e10984f48

SHA-1:
dbac643e5e62e150742a4737bc1899d4c0463fcc

SHA-256:
b61ee7d9f45fbb761fe5e2dd16be642794fbc004c3ef6fb353f3a4a85b53399b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 12:56:18 PM UTC  (today)

File size:
383 KB (392,192 bytes)

File type:
Dynamic link library (Win64 DLL)

File PE Metadata
Compilation timestamp:
9/29/2015 7:09:18 PM

OS version:
6.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
6144:7HmWeZyWGc1bOYEoxgec+ytnVGcSLeVPdIeOOM824R8El2GpC7axNyMDJ3Nl:VEGfYEox1vypVNS6VGeu87Jy4

Entry address:
0x2E6F8

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, E7, 03, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 67, FE, FF, FF, CC, CC, CC, 83, 25, 05, F1, 02, 00, 00, C3, 48, 89, 5C, 24, 08, 55, 48, 8D, AC, 24, 40, FB, FF, FF, 48, 81, EC, C0, 05, 00, 00, 8B, D9, B9, 17, 00, 00, 00, E8, A5, 93, 01, 00, 85, C0, 74, 04, 8B, CB, CD, 29, 83, 25, D4, F0, 02, 00, 00, 48, 8D, 4D, F0, 33, D2, 41, B8...
 
[+]

Code size:
287.5 KB (294,400 bytes)

The file dxgi.dll has been seen being distributed by the following URL.

https://content-na.drive.amazonaws.com/cdproxy/.../e5qRM2wt--maeOx_UbI-GuSLfk82hHM6h83cZFLCbLkE0Xnc3?download=true

Scan dxgi.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.