home

qwindows.dllold

MD5:
84ad0cfb58f632a1061a099fef75dc35

SHA-1:
33e64a259697521e817060aaad4825afcdcef9c4

SHA-256:
fbcdc9712dd4d0eea0dfe893834ff797edd773f2cd793d6ad4a15c52b3e418d6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 3:49:48 AM UTC  (today)

File size:
9 KB (9,216 bytes)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\qwindows.dllold

File PE Metadata
Compilation timestamp:
7/2/2013 12:02:54 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
192:yGo3DEjz2y4ux77IBhlgl6P5Z8TH7nI0apXAosT7vLazB9:yrDE+ym6um7aZs789

Entry address:
0x89B60

Code size:
550.5 KB (563,712 bytes)

The file qwindows.dllold has been seen being distributed by the following URL.

http://zxrmedia.com/client/_st2/.../qwindows.dll

Scan qwindows.dllold - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.