home

trackerui.dll

MD5:
141daeee59264c5414075f984ff058eb

SHA-1:
b7fbce943a5f3ee9f582ccd6c68583879e924a7e

SHA-256:
01c1bcf43bc134944f5194d01c7178972383b51cf314b0fa6532b9c477c69fb4

Scanner detections:
5 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/17/2024 4:54:42 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Spy.Agent.162816.2
7.11.205.162

IKARUS anti.virus
Trojan.SuspectCRC
t3scan.1.8.6.0

McAfee
Artemis!141DAEEE5926
5600.6470

Norman
Suspicious_Gen5.BAKFQ
11.20160305

Trend Micro House Call
TROJ_GEN.R047H09LK14
7.2.65

File size:
159 KB (162,816 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\trackerui.dll

File PE Metadata
Compilation timestamp:
12/19/2014 2:14:50 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.23

CTPH (ssdeep):
3072:rbJA1G11fAV/r3dR85FQUekQNVVr6jFSoLt6KdxCtI1U2UqV9YFiCnK4mtMqK:r+SfAV/rX8wN/UnhdKSUqVCvmtt

Entry address:
0x98440

Entry point:
80, 7C, 24, 08, 01, 0F, 85, F9, 01, 00, 00, 60, BE, 15, 10, 13, 6B, 8D, BE, EB, FF, F8, FF, C7, 87, 98, 97, 08, 00, 02, 20, 56, 4F, 57, EB, 0E, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03...
 
[+]

Code size:
160 KB (163,840 bytes)

The file trackerui.dll has been seen being distributed by the following 2 URLs.

http://cssetti.pl/pliki/.../TrackerUI.DLL

http://csiks.pl/pliki/.../TrackerUI.DLL

Scan trackerui.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.