OnlineFix64[.]dll | Triage™

Resubmissions

02/11/2026, 09:30

261102-lgnl2aay9r

02/11/2026, 09:29

261102-lf2ghaay9k3

Sharing

Copy URL Twitter E-mail

General

Target
OnlineFix64.dll
Size 10.3MB
Sample261102-lf2ghaay9k
SHA256 52cb3902999034e01bae63c6a06612d1798b0e0addc1bd4ce7680891b0229953
MD5 b3e8218b465f3747c87a3556e0dcbe50
SHA1 8acf603b9106a527c9394b6dc07c5e62db67174a
SHA512 60915a81d87cdd03d3bbad2fa1ef652ca510d92c44c887349eb726181c8ed908470a0d3754d4a16fccc2ea05bc3156bd64a442337d0980ec2d5d04b773e944df
SSDEEP 196608:52AHZACBNBNw8+xrW+g+RjLqesqk89mSP0tg+htwB0EEfoegB:5B1w8NnykG+fwkfA
TLSH
T107B6128A68D9C1BCD845CA70D6092AFCE0DE34694DB9643B7FCB58017A31C99C8E5F72
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OnlineFix64.dll

File Explorer

OnlineFix64.dll

.dll 10.3MB

OnlineFix64.dll

IMPHASH 070d4dabdb7f228b1a4b95220a19b173
SHA256 52cb3902999034e01bae63c6a06612d1798b0e0addc1bd4ce7680891b0229953
MD5 b3e8218b465f3747c87a3556e0dcbe50
SHA1 8acf603b9106a527c9394b6dc07c5e62db67174a
SHA512 60915a81d87cdd03d3bbad2fa1ef652ca510d92c44c887349eb726181c8ed908470a0d3754d4a16fccc2ea05bc3156bd64a442337d0980ec2d5d04b773e944df
SSDEEP 196608:52AHZACBNBNw8+xrW+g+RjLqesqk89mSP0tg+htwB0EEfoegB:5B1w8NnykG+fwkfA
TLSH
T107B6128A68D9C1BCD845CA70D6092AFCE0DE34694DB9643B7FCB58017A31C99C8E5F72
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11833982

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

Virtual Size

145KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ofme0

Size

Virtual Size

6.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.ofme1

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ofme2

Size

10.3MB

Virtual Size

10.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

660B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

196B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

OnlineFix64.dll

kernel32

user32

shell32

generic