home

0.exe

The application 0.exe has been detected as a potentially unwanted program by 25 anti-malware scanners.
Version:
0.0.0.0

MD5:
af435365c803218a9ff24ba2ada4405a

SHA-1:
8b37f965fce2a25e710f6eaf996ee1778b0ca31e

SHA-256:
b0f21d74bba0e65925d062f3f4435ad2c75bbd13361a989956d899f9aff26f9b

Scanner detections:
25 / 68

Status:
Potentially unwanted

Analysis date:
4/25/2024 8:05:12 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Adware.Barys.2254
5646091

AhnLab V3 Security
Trojan/Win32.Generic
2014.11.23

Avira AntiVirus
TR/Dropper.Gen
7.11.188.28

avast!
MSIL:Agent-FI [Trj]
150319-1

AVG
MSIL5
2016.0.3136

Baidu Antivirus
Trojan.MSIL.Injector
4.0.3.15418

Bitdefender
Gen:Variant.Adware.Barys.2254
1.0.20.540

Dr.Web
Trojan.DownLoader11.45672
9.0.1.05190

Emsisoft Anti-Malware
Gen:Variant.Adware.Barys.2254
9.0.0.4799

ESET NOD32
MSIL/Injector.AFC trojan
7.0.302.0

Fortinet FortiGate
MSIL/Injector.PE!tr
4/18/2015

F-Secure
Gen:Variant.Adware.Barys
5.13.68

G Data
Gen:Variant.Adware.Barys.2254
15.4.24

IKARUS anti.virus
Virus.Win32.BeeInject
t3scan.1.8.3.0

Kaspersky
HEUR:Trojan.Win32.Generic
14.0.0.2173

Malwarebytes
Backdoor.MSIL.PGen
v2015.04.18.09

McAfee
Trojan.Artemis!AF435365C803
16.8.708.2

Microsoft Security Essentials
VirTool:MSIL/Injector.ED
1.11202

MicroWorld eScan
Gen:Variant.Adware.Barys.2254
16.0.0.324

NANO AntiVirus
Trojan.Win32.Bifrost.dcdjpa
0.28.6.63474

Norman
Gen:Variant.Adware.Barys.2254
03.12.2014 13:20:04

Qihoo 360 Security
HEUR/QVM03.0.Malware.Gen
1.0.0.1015

Rising Antivirus
PE:Trojan.Win32.Generic.17A97B6F!396983151
23.00.65.15416

Sophos
Mal/Generic-S
4.98

VIPRE Antivirus
Threat.4150696
38882

File size:
1.1 MB (1,197,568 bytes)

Product version:
0.0.0.0

Original file name:
1234.exe

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
11/21/2014 11:06:42 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:ODwazTFQeVpN/flDHmH+oYPgIVD5epE42Ipb6J0NypQ7IRXxyuyREdZT+Y+l6Yy1:ODwazTF

Entry address:
0x125C4E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.1 MB (1,195,520 bytes)

Remove 0.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.