Associated Malware Groups
The filename is associated with the malware groups:
- Cloaked Malware
- Malicious Software
File Behavior
WINCTRL32.DLL has been seen to perform the following behavior:
- Found on infected systems and resists interrogation by security products
WINCTRL32.DLL has been the subject of the following behavior:
- Registered as a Dynamic Link Library File
- Added as a Winlogon Notification DLL to automatically load on system start up
- Deleted as a process from disk
- Created as a process on disk
- Added as a Registry Key (RUNONCE) to auto start Programs on system start up
Country Of Origin
The filename WINCTRL32.DLL was first seen on May 16 2008 in the following geographical regions of the Prevx community:
- GERMANY on May 16 2008
- SPAIN on May 16 2008
- NETHERLANDS on Jun 10 2008
- SLOVENIA on Jun 11 2008
- The UNITED KINGDOM on Jun 26 2008
- The EUROPEAN UNION on Oct 14 2008
File Name Aliases
WINCTRL32.DLL can also use the following file names:
- 01C96754F936F6D4_WINCTRL32_DL_.PE
- 01C9679D450D8E54_WINCTRL32_DL_.PE
- 46535399.EX_
- WINCTRL32___.DLL
- WINCTRL32(n).DLL
- 00935051.DLL
- WINCTRL32.DL_
- QSRXTTY.TMP
- 14749493.SVD
- 29782953.SVD
- 43569762.DLL
- 50892475.DLL
- 01928681.DLL
- 63017383.DLL
- 18947249.DL_
- 74836843.SVD
- 31136314.SVD
- 95626666.SVD
- 51596267.SVD
- WINCTRL32(2).DLL
- 05031887.DLL
- 67106961.DLL
- 67986811.DL_
- 04969328.DLL
- 05989513.DLL
- 25855502.DL_
- 78170914.DLL
Filesizes
The following file size has been seen:
- 16,896 bytes
- 15,360 bytes
- 17,408 bytes
- 15,872 bytes
- 14,336 bytes
File Type
The filename WINCTRL32.DLL refers to many versions of a dynamic link library.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.