home

formaccess4ybf7hju.dll

MD5:
e7d6c8260b9c583c02a5e19a30787c38

SHA-1:
1a2371f99389b8237f87de872abc287df3df90d7

SHA-256:
5e05d0022cbf9d7d27263a3eacf3f44ea5d713f9a5d74f285d7cdc156f83b7ba

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/6/2024 10:26:02 AM UTC  (today)

File size:
398 Bytes

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\formaccess4ybf7hju.dll

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
12:TTqQdajVatkiMHGt1XnocOKg6evEB1m5GEOBiqVGu:KQdajEtqGrXpeqm5GE2ie

Entry point:
3C, 68, 74, 6D, 6C, 3E, 0D, 0A, 3C, 68, 65, 61, 64, 3E, 3C, 2F, 68, 65, 61, 64, 3E, 0D, 0A, 3C, 4D, 45, 54, 41, 20, 48, 54, 54, 50, 2D, 45, 51, 55, 49, 56, 3D, 22, 52, 45, 46, 52, 45, 53, 48, 22, 20, 43, 4F, 4E, 54, 45, 4E, 54, 3D, 22, 30, 3B, 20, 55, 52, 4C, 3D, 68, 74, 74, 70, 73, 3A, 2F, 2F, 77, 68, 75, 2E, 67, 72, 75, 70, 6F, 73, 61, 6E, 74, 61, 6E, 64, 65, 72, 2E, 63, 6C, 3A, 34, 34, 33, 2F, 75, 6C, 74, 77, 65, 62, 2F, 46, 4F, 52, 4D, 5F, 46, 6F, 72, 6D, 61, 6C, 69, 7A, 61, 64, 6F, 72, 5F, 2D, 5F, 4D...
 
[+]

The file formaccess4ybf7hju.dll has been seen being distributed by the following URL.

https://whu.gruposantander.cl/ultweb/.../FormAccess.dll?OpenForm?$$EAF8D9575B48BA19CBB59D597D87654FA8B87E01C34D309327FB931EE97F3B08B654D34B75E7AC3D19E1484640E7336A319D695905B52D20B4E261C0088619CF891ECF141717308C286CB79143B70178F6F46DA1D3AC0832210AA37CEE4F3B1420C4B9819904023B50FF05D41A9768B20B284AA402AE9DA14013595F8D850C78EDC4B1A218E6070DD7069B0F8160D3BF21F54CF7BF65D67D838C109AB925184AFDCFFAC09642EFDFEFC2F8B9E157BE51$$

Scan formaccess4ybf7hju.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.