home

xfile.dll

MD5:
5c934c3e0c61a8e66e578d3bbd3e3013

SHA-1:
aae06f6cd96e70da8027fb366524cbfc78e36a4f

SHA-256:
69279826ca9b4472a8e410239bd59e567c0584fccb5ffbf5334cb8475634182a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 10:53:12 PM UTC  (today)

File size:
8 Bytes

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\content.ie5\i7g1t0j0\xfile.dll

File PE Metadata
OS bitness:
Win64

Entry point:
32, 2E, 30, 2E, 30, 2E, 34, 33...
 
[+]

Entropy:
2.1556

Packer / compiler:
RLPack FullEdition V1.1X

The file xfile.dll has been seen being distributed by the following 11 URLs.

http://patch1.pdpop.com/.../xfile.dll?rd=508924062

http://patch1.pdpop.com/.../xfile.dll?rd=468956734

http://patch2.pdpop.com/.../xfile.dll?rd=1275109

http://patch2.pdpop.com/.../xfile.dll?rd=127731531

http://patch3.pdpop.com/.../xfile.dll?rd=771696078

http://patch2.pdpop.com/.../xfile.dll?rd=726125

http://patch2.pdpop.com/.../xfile.dll

http://patch3.pdpop.com/.../xfile.dll

http://patch1.pdpop.com/.../xfile.dll

http://patch2.pdpop.com/.../xfile.dll?rd=69966531

http://patch3.pdpop.com/.../xfile.dll?rd=-1341226982

Scan xfile.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.