home

eerere.dll

MD5:
d39953e87d51f6998d36d16c6bfa3f53

SHA-1:
3cbbb02a41d886472e9fa47da71ba2b992a3fdcd

SHA-256:
55698e83f7ca33de30d9341612f2b816b3258fb5762c2f67083bd7cb05f6305e

Scanner detections:
4 / 68

Status:
Clean  (4 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/30/2025 8:59:29 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
Win32/Blacked
2015.0.4604

Emsisoft Anti-Malware
Gen:Trojan.Heur.GM.0400460010
11.5.0.6191

ESET NOD32
Win32/Packed.VMProtect.ABO trojan
8.0.319.0

Norman
Gen:Trojan.Heur.GM.0400460010
28.05.2016 15:32:18

File size:
174.5 KB (178,688 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\eerere.dll

File PE Metadata
Compilation timestamp:
6/28/2016 7:02:33 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
3072:CWWjj7EY/hvJSM2xPyfdcntgWPnXXZVSj+1iu57i40SXvmOGmWjlalJG2wgexL7U:MjovWvknXJVO85rXvBGmW2wgeZ7R0P

Entry address:
0x5090F

Entry point:
9C, C7, 04, 24, 3E, 9C, BA, 40, 60, C7, 44, 24, 20, 07, D9, B4, F0, 9C, E9, 60, 85, FF, FF, E9, 31, BD, FD, FF, 49, FF, 34, 24, 60, 68, 1E, A7, 90, C0, 8D, 64, 24, 2C, 0F, 85, D0, F4, FE, FF, C1, E9, 0A, 8B, 4D, FC, 51, 39, 4D, 14, 60, E8, 8A, 56, FF, FF, F3, A4, 5E, 5E, 68, DF, BF, 38, D0, 60, 9C, 8D, 64, 24, 28, E9, 5F, 79, FF, FF, 60, E9, 8E, 07, 00, 00, 7E, 44, 7F, 75, 2B, 76, BC, C1, 83, 7C, 8D, B4, 10, FB, BC, 38, 44, 5D, 2F, 72, 3A, 67, 74, 79, 42, B2, DE, C3, C5, DC, 85, 17, D4, 19, E2, 0B, 79, 28...
 
[+]

Entropy:
7.8276  (probably packed)

Code size:
46 KB (47,104 bytes)

The file eerere.dll has been seen being distributed by the following URL.

http://elswordhack.net/wordtrainer/.../eerere.dll

Scan eerere.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.