home

qtopenxml.dll

MD5:
a8a50fbf46e5535182ad990bc03de7db

SHA-1:
9a2587622f19d4174220e02085858ec2ec5a22e9

SHA-256:
82be54565e8be59625a1ed1f78b22995f4ecfcc64ea7c05defa503b5d509f50e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 10:02:46 AM UTC  (today)

File size:
2.7 KB (2,721 bytes)

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\qtopenxml.dll

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
48:PwUep/uRVOUfKhNgjIu9EQqnFmskxaLg3XydG89Oha2Vo1gj0u2Q9ns1j:PlfKhNgTcYfa2VcgH+

Entry point:
5B, 31, 31, 2E, 33, 2E, 31, 2E, 32, 5D, 0D, 0A, 30, 37, 38, 34, 30, 31, 35, 33, 32, 38, 36, 36, 30, 38, 31, 64, 64, 64, 64, 61, 36, 37, 34, 34, 32, 32, 30, 62, 34, 63, 37, 35, 3D, 64, 63, 34, 34, 31, 63, 65, 63, 0D, 0A, 62, 65, 63, 32, 61, 34, 64, 61, 64, 65, 33, 38, 33, 61, 61, 64, 35, 32, 62, 62, 30, 31, 63, 33, 64, 62, 61, 32, 63, 62, 37, 30, 3D, 64, 63, 65, 66, 62, 33, 31, 63, 0D, 0A, 33, 33, 36, 34, 66, 31, 36, 32, 35, 33, 33, 39, 39, 39, 37, 38, 30, 34, 61, 30, 61, 65, 66, 30, 63, 33, 30, 31, 38, 38...
 
[+]

Entropy:
4.1851

The file qtopenxml.dll has been seen being distributed by the following URL.

http://www.haimazhuang.com/.../QtOpenXml.dll

Scan qtopenxml.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.