home

openal32.dll

MD5:
60009e325f0df47a0463ff3e86dbba61

SHA-1:
febc44b139687703100473fc872adee339dd79b1

SHA-256:
ef9a58b90887e11c515299010f998f1e3ec6cb86d9a8245f9843bc4ac7f269d2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 2:02:38 AM UTC  (today)

File size:
105.5 KB (108,032 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\minecraft\natives\openal32.dll

File PE Metadata
Compilation timestamp:
3/15/2009 5:33:46 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:GibH0CM38GCvPZRT0AwQFQpxa2topVmt2WupqRRbalm9ZQfu:fbHS8GoPjApqg7aPA2HpqcK

Entry address:
0x127430

Entry point:
80, 7C, 24, 08, 01, 0F, 85, 7D, 01, 00, 00, 60, BE, 00, E0, 10, 10, 8D, BE, 00, 30, EF, FF, 57, 83, CD, FF, EB, 0D, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB...
 
[+]

Entropy:
7.8968

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 - v1.22, 0x

Code size:
104 KB (106,496 bytes)

The file openal32.dll has been discovered within the following programs.

Atom Zombie Smasher  by Blendo Games
www.blendogames.com
About 7% of users remove it
Command & Conquer™ Red Alert™ 3  by Electronic Arts
Command & Conquer™ Red Alert™ 3 is a video game distributed through EA's Origin digital distribution and digital rights management content delivery system.
www.ea.com
3% remove it
Minecraft  by MINECRAFTinstall.net
Publisher's description - “Minecraft is a game about breaking and placing blocks. At first, people built structures to protect against nocturnal monsters, but as the game grew players worked together to create wonderful, imaginative things. ”
minecraftinstall.net
26% remove it
Turok: Dinosaur Hunter  by Iguana Entertainment
www.nightdivestudios.com/games/turok-dinosaur-hunter/?utm_source=steampowered.com&utm_medium=product&utm_campaign=website%20-%20turok%20dinosaur%20hunter
About 6% of users remove it
 
Powered by Should I Remove It?

The file openal32.dll has been seen being distributed by the following 9 URLs.

http://s5917.chomikuj.pl/File.aspx?e=yEB2atVz3ggs35XCZVzE59_wDJseMRidSysOcxxLt4HDionLZ1G5afPCI6GWVvuggDbU0MbH-VTouZ5UUTTAIlgdzBAp2pNU6Pynp6MoqX1RNlMgewi7dGVkhvG-5Fwl5wkTdXxbSTdwDp8dKNEI6Q&pv=2

http://s10355.chomikuj.pl/File.aspx?e=yEB2atVz3ggs35XCZVzE59_wDJseMRidSysOcxxLt4FwQCqgF4bogCuBEUFh-ZWZ4qNa3m7l1XUlUL_a8TKC53spEzpUhQ4S5vp8hdZMN7Ob0Y8WedznmGIVCbdH0XV0q3chu9pvWxkKC-rVlFwc8w&pv=2

http://trudio.ru/server/TechNova/TechNova/bin/.../OpenAL32.dll

https://mega.nz/temporary/.../N1QWRBxT

http://s5917.chomikuj.pl/File.aspx?e=yEB2atVz3ggs35XCZVzE59_wDJseMRidSysOcxxLt4GGcEYMoz7Jyn-T6-0aGcHDqaj_Sh59CMFiIDyUKfxj95cN94OY6bGjNScXYH9e6cJpglNVo6n_iRLpvIiXz8ukM9WWe22iN3HJtIiBIRTT0Q&pv=2

http://s10355.chomikuj.pl/File.aspx?e=yEB2atVz3ggs35XCZVzE59_wDJseMRidSysOcxxLt4GjSYGn5Dta1LXiWOei-kEFfg3mkKiwrwlRe6y9ZLMGECh5EFPE8dlhcZb7rgBQ1oswbpxmst3dGF2JovB6n4GdWXi6iKN7JH5cpbjliFl54A&pv=2

http://s10355.chomikuj.pl/File.aspx?e=yEB2atVz3ggs35XCZVzE59_wDJseMRidSysOcxxLt4GrSMU_9y3DNMvhtUuOdOXpLYTA_NtvB33nYCQznxwKR0RNm0Q1N-Xack8IkBgr1aAbGirozIkK4VpVJJZlMdpCy11iXGNWmEo9DTAeykNFOQ&pv=2

http://s10355.chomikuj.pl/File.aspx?e=yEB2atVz3ggs35XCZVzE59_wDJseMRidSysOcxxLt4ESn9vGEZ9DJs-Jh6lpaQ7LTFdekt4MKip4fm8p-0DNYW35vmFlIzTURiV3cr6xoO2H6X3T7ojKxnRHfodHJ1GiElGWULD5wAm5dMx3c-KDjQ&pv=2

http://s10355.chomikuj.pl/File.aspx?e=yEB2atVz3ggs35XCZVzE59iFcQCBJ2Rle8TvaPxaJIHPKe6sh414lPl7FHiR68K8N1y0M-rurh62uj6KZ763cLQMQ3bxbtQx1fgStwAGHN2keVfqg4DK_J2MUdYBcO0N9HiRDM-WxWO-NOLv3HrXMg&pv=2

Scan openal32.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.