home

librtmp.dll

MD5:
ab5e6208b97a40ec3fb76499adf305d3

SHA-1:
4cc9545178af58015f0623d9c4b29852dbaec64b

SHA-256:
b3f7a37cbe08687fa119a00a0f8366db68f92bf5b04336f89618e9cc32d8d285

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/15/2024 11:26:46 AM UTC  (today)

Scan engine
Detection
Engine version

XVirus List
Win.Detected
2.3.31

File size:
130.5 KB (133,632 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\librtmp.dll

File PE Metadata
Compilation timestamp:
8/9/2013 9:58:29 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.23

CTPH (ssdeep):
3072:gNJfoGI0W1Mo0MnXDTHsnkG4ZGM6vW/GRE8/J6OFNcJ04TBfKE/f:+a0mX3snd4zERE8wOFN94TBS8f

Entry address:
0x10C0

Entry point:
55, 89, E5, 83, EC, 38, 89, 5D, F4, 8B, 5D, 0C, 89, 75, F8, 8B, 75, 08, 89, 7D, FC, 8B, 7D, 10, 83, FB, 01, 74, 43, 89, 7C, 24, 08, 89, 5C, 24, 04, 89, 34, 24, E8, D3, 0E, 01, 00, 83, EC, 0C, 85, DB, 75, 19, 8B, 15, 00, 00, 46, 6A, 85, D2, 0F, 84, 8E, 00, 00, 00, 89, 45, E4, E8, 56, FF, FF, FF, 8B, 45, E4, 8B, 5D, F4, 8B, 75, F8, 8B, 7D, FC, 89, EC, 5D, C2, 0C, 00, 8D, 74, 26, 00, C7, 04, 24, 80, 00, 00, 00, E8, DC, 5E, 01, 00, 85, C0, A3, 00, 00, 46, 6A, 74, 62, C7, 00, 00, 00, 00, 00, A3, 10, 00, 46, 6A...
 
[+]

Code size:
89.5 KB (91,648 bytes)

The file librtmp.dll has been discovered within the following programs.

Dogecoin  by the dogecoin project
Publisher's description - “dogecoin is an open source peer-to-peer cryptocurrency, favored by Shiba Inus worldwide. You can use it to buy goods and services, or trade it for other currencies (both other cryptocurrencies or traditional currency like US dollars).”
dogecoin.com
26% remove it
Real Player Auto Crack  by Crack Team
About 3% of users remove it
 
Powered by Should I Remove It?

The file librtmp.dll has been seen being distributed by the following 4 URLs.

http://m.0459f1e5dc998dc996096e9552b42918.com/.../librtmp.dll

ftp://ftp.republika.pl/.../librtmp.dll

http://m.0839f88ae61efaa3e91fdf5b732b242f.com/.../librtmp.dll

ftp://ftp.thienfinance.com/Oppsett_vapor/.../librtmp.dll

Scan librtmp.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.