home

formaccesshzkc6oxc.dll

MD5:
b55cc74c007d8f37175f18a99440dd20

SHA-1:
7821605569349560b8aedcad5cc88912384dbe52

SHA-256:
1ed89a584db631dc9b3cadac321a49b38f9c807d76c637f7bd72d89e536d671f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/6/2024 10:21:43 AM UTC  (today)

File size:
398 Bytes

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\formaccesshzkc6oxc.dll

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
12:TTqQdajVat8MHGt1XnocOKg6evEB1m5GEOBiqVGu:KQdajEtDGrXpeqm5GE2ie

Entry point:
3C, 68, 74, 6D, 6C, 3E, 0D, 0A, 3C, 68, 65, 61, 64, 3E, 3C, 2F, 68, 65, 61, 64, 3E, 0D, 0A, 3C, 4D, 45, 54, 41, 20, 48, 54, 54, 50, 2D, 45, 51, 55, 49, 56, 3D, 22, 52, 45, 46, 52, 45, 53, 48, 22, 20, 43, 4F, 4E, 54, 45, 4E, 54, 3D, 22, 30, 3B, 20, 55, 52, 4C, 3D, 68, 74, 74, 70, 73, 3A, 2F, 2F, 77, 68, 75, 2E, 67, 72, 75, 70, 6F, 73, 61, 6E, 74, 61, 6E, 64, 65, 72, 2E, 63, 6C, 3A, 34, 34, 33, 2F, 75, 6C, 74, 77, 65, 62, 2F, 46, 4F, 52, 4D, 5F, 46, 6F, 72, 6D, 61, 6C, 69, 7A, 61, 64, 6F, 72, 5F, 2D, 5F, 4D...
 
[+]

The file formaccesshzkc6oxc.dll has been seen being distributed by the following URL.

https://whu.gruposantander.cl/ultweb/.../FormAccess.dll?OpenForm?$$EAF8D9575B48BA19087ED4941705D0AAB1A6597E7AF15D848CE12D08AEAC57C7A2A6A3153D96AD8E31C6C0B85E569BF1EF75D0B5C4FA9CC6D9EF39E6B55C61034C0163488E8B7927286CB79143B70178F6F46DA1D3AC0832210AA37CEE4F3B1420C4B9819904023B50FF05D41A9768B20B284AA402AE9DA14013595F8D850C78EDC4B1A218E6070DD7069B0F8160D3BF21F54CF7BF65D67D838C109AB925184AFDCFFAC09642EFDFEFC2F8B9E157BE51$$

Scan formaccesshzkc6oxc.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.