xtrapva.dll

MD5:
bed49252c6cc06313b2188b1b4abd8bf

SHA-1:
156990f104dc7aa436b9624e44662dc4f13dcf8b

SHA-256:
15254c4f7d78dc76c54bd050caae3bffb22cf740d52fd0e31348b9f0f5fa0d43

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
12/26/2024 2:15:09 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.Packed
1.3.0.7717

Sophos
Mal/EncPk-DW
4.98

File size:
2.6 MB (2,753,512 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\xtrapva.dll

File PE Metadata
Compilation timestamp:
7/31/2015 12:08:04 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:5+oRBdDVeyPYZfE0MsCAAiBk1gHdBGi3O6:0oRBdZsCv47fGy

Entry address:
0x858044

Code size:
2.6 MB (2,711,552 bytes)

The file xtrapva.dll has been seen being distributed by the following URL.

Scan xtrapva.dll - Powered by Reason Core Security