home

hypnobot-macro-test4.dll

MD5:
84aae7bc10cd6174cd1164026f636865

SHA-1:
cbf6107dfdfb19e5464e212e17c86956e7b8a5e2

SHA-256:
c5f7da712e6227e9b998dd740265e6610206e69d338eead93a9b7f3b6f5d0978

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/24/2024 1:58:14 AM UTC  (today)

Scan engine
Detection
Engine version

AegisLab AV Signature
Troj.Dropper.Gen
2.1.4+

File size:
311.5 KB (318,976 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\downloads\hypnobot-macro-test4.dll

File PE Metadata
Compilation timestamp:
11/2/2012 2:10:57 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:5KfLXjsfuqRPUozdGktzRbG3RjdT3hsfS1gDm5k8vjA/eREOnS:5KfDj5JoFzRqxhsfS1gDm5k8vjv

Entry address:
0x168C2

Entry point:
FF, 25, 84, 81, 01, 10, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 4D, F0, 83, E9, 48, FF, 25, 6C, 80, 01, 10, 8B, 54, 24, 08, 8D, 42, 0C, 8B, 4A, F0, 33, C8, E8, FB, E1, FF, FF, B8, 44, CC, 04, 10, E9, BF, FF, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, E9, 0B, A7, FE, FF, 8B, 54, 24, 08, 8D, 42, 0C, 8B, 4A, F8, 33, C8, E8, D2, E1, FF, FF, B8, 9C, CC, 04, 10, E9, 96, FF, FF, FF, 8B, 54, 24, 08, 8D, 42, 0C, 8B, 4A, EC, 33, C8, E8, B7, E1, FF, FF, B8, F4, CC, 04, 10, E9, 7B, FF, FF, FF, CC, CC, CC, CC, CC, 8B, 54...
 
[+]

Entropy:
6.6957

Code size:
89 KB (91,136 bytes)

The file hypnobot-macro-test4.dll has been seen being distributed by the following URL.

http://localhostr.com/file/.../HYPNOBOT-MACRO-TEST4.dll?agree=on

Scan hypnobot-macro-test4.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.