home

регистрация.exe

The executable регистрация.exe has been detected as malware by 19 anti-virus scanners.
MD5:
b67341245d17ff56867861e41e8a5e93

SHA-1:
02a0a4cb622ff2803d4cc22f1757ebcd5357c9cf

Scanner detections:
19 / 68

Status:
Malware

Analysis date:
4/23/2024 11:00:16 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Trojan.Bumat
7.1.1

AhnLab V3 Security
Win-Trojan/Xema.variant
2014.09.21

avast!
Win32:Trojan-gen
2014.9-140922

AVG
Generic13
2015.0.3344

Bkav FE
W32.Clodd49.Trojan
1.3.0.4959

Comodo Security
UnclassifiedMalware
19569

Fortinet FortiGate
W32/Malware_fam.NB
9/22/2014

G Data
Win32.Trojan.Agent.UJNWHA
14.9.24

McAfee
Generic.dx!sjg
5600.7000

Norman
Obfuscated_NA
11.20140922

nProtect
Trojan/W32.Agent.87552.CI
14.09.19.01

Panda Antivirus
Generic Trojan
14.09.22.10

Qihoo 360 Security
HEUR/Malware.QVM11.Gen
1.0.0.1015

Rising Antivirus
PE:Trojan.Win32.Generic.12DC153F!316413247
23.00.65.14920

Sophos
Mal/Generic-S
4.98

Trend Micro House Call
PAK_Generic.005
7.2.265

Trend Micro
PAK_Generic.005
10.465.22

Vba32 AntiVirus
Trojan.VBKrypt
3.12.26.3

VIPRE Antivirus
Trojan.1
33290

File size:
85.5 KB (87,552 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\total commander podarok edition\programm\asterisks xp\???????????.exe

File PE Metadata
Compilation timestamp:
6/20/1992 2:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

CTPH (ssdeep):
1536:Ur9fU0Bi4KJd+CoM+deMnchiqRPOAJTeO1QrBgeOSfTg6z8OTFq3vDq7Kax86xxO:Oeei4KJdzb4RHqxvTotnOSLNz8OTEvDN

Entry address:
0x5D482

Entry point:
EB, 02, 30, 66, EB, E8, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 73, EF, 75, 09, 8B, 1E...
 
[+]

Packer / compiler:
UPX Protector v1.0x (2)

Code size:
84 KB (86,016 bytes)

Remove регистрация.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.