home

hypnobot-v.122.1a.dll

MD5:
a5ba76ab21a51c3d1be8fa46785f9bc1

SHA-1:
b5d1aa78c367d1ed2c68d20ac1ca2e14640bc3bd

SHA-256:
8044ad178560ae0543f33f46e57ee8ce569697cc7a56dd52d24b065dccb845fb

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/24/2024 1:45:43 AM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V1120
7.2.299

File size:
311.5 KB (318,976 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\downloads\hypnobot-v.122.1a.dll

File PE Metadata
Compilation timestamp:
11/15/2012 3:28:28 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:g2RAasRtsfuqRPUozdGktzkLGsldTkhsfS1gDm5k8vtK/41sOnE:g2Dst5JoFz6XGhsfS1gDm5k8vt

Entry address:
0x169AC

Entry point:
FF, 25, 88, 81, 01, 10, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 4D, F0, 83, E9, 48, FF, 25, 70, 80, 01, 10, 8B, 54, 24, 08, 8D, 42, 0C, 8B, 4A, F0, 33, C8, E8, FB, E1, FF, FF, B8, 44, CC, 04, 10, E9, B9, FF, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, E9, 1B, A6, FE, FF, 8B, 54, 24, 08, 8D, 42, 0C, 8B, 4A, F8, 33, C8, E8, D2, E1, FF, FF, B8, 9C, CC, 04, 10, E9, 90, FF, FF, FF, 8B, 54, 24, 08, 8D, 42, 0C, 8B, 4A, EC, 33, C8, E8, B7, E1, FF, FF, B8, F4, CC, 04, 10, E9, 75, FF, FF, FF, CC...
 
[+]

Entropy:
6.6987

Code size:
89 KB (91,136 bytes)

The file hypnobot-v.122.1a.dll has been seen being distributed by the following URL.

http://localhostr.com/file/.../HypnoBot-v.122.1A.dll?agree=on

Scan hypnobot-v.122.1a.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.