home

foo_input_alac.dll

MD5:
3f2def9ae35ca9d90a6e78f832820c80

SHA-1:
d069224c8d15d5b7fef5219dc99cf9875df72670

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 12:37:53 AM UTC  (today)

File size:
108.5 KB (111,104 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\foobar2000\components\foo_input_alac.dll

File PE Metadata
Compilation timestamp:
6/4/2008 8:29:06 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1536:qUUqgQ6rLK3sZZDCaltuD1rP/6v+pvcbI1fbcMvmsUq3t55GT:qUUqGrL/D361/6CH1D5msx3t55GT

Entry address:
0x5675

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 90, 48, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 8B, 4D, 08, 56, 8B, C1, BA, 00, FF, 00, 00, 23, C2, 8B, F1, C1, E6, 10, 03, C6, 8B, F1, C1, EE, 08, 23, F2, C1, E0, 08, 03, C6, C1, E9, 18, 03, C1, 5E, 5D, C3, 8B, FF, 55, 8B, EC, 8B, 4D, 08, 8B, C1, C1, E0, 08, 66, C1, E9, 08, 66, 03, C1, 5D, C3, 8B, FF, 55, 8B, EC, 6A, 0A, 6A, 00, FF, 75, 08, E8, AE, 4B, 00, 00, 83, C4, 0C, 5D, C3, CC, CC, CC, CC...
 
[+]

Code size:
79.5 KB (81,408 bytes)

The file foo_input_alac.dll has been seen being distributed by the following URL.

http://file3.data.weipan.cn.wscdns.com/.../d069224c8d15d5b7fef5219dc99cf9875df72670?ip=1449831587,83.7.148.158&ssig=arZt 91uwp&Expires=1449833377&KID=sae,l30zoo1wmz&fn=foo_input_alac.dll&skiprd=2&se_ip_debug=83.7.148.158&corp=2&from=1221134

Scan foo_input_alac.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.