{03312408-c523-e469-c612-c061c8550871}.exe

The executable {03312408-c523-e469-c612-c061c8550871}.exe has been detected as malware by 3 anti-virus scanners.
Remove {03312408-c523-e469-c612-c061c8550871}.exe - Powered by Reason Core Security
MD5:
201b173d16ab80e66b1012acbc336e60

SHA-1:
ca8fa86e4604fb7767bec4fbc42fd6fad8df91fb

SHA-256:
b58146d406364158d36c4be5208034999d2e4368662cd02b6dcb4f9f2c2bf45e

Scanner detections:
3 / 68

Status:
Malware

Analysis date:
12/6/2016 1:18:05 PM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Zbot-TTP [Trj]
140608-0

ESET NOD32
Win32/Kryptik.BECF trojan
7.0.302.0

IKARUS anti.virus
Trojan.SuspectCRC
t3scan.1.6.1.0

Remove {03312408-c523-e469-c612-c061c8550871}.exe - Powered by Reason Core Security
File size:
91.5 KB (93,696 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\Application data\wabeventsupport16\{03312408-c523-e469-c612-c061c8550871}.exe

File PE Metadata
Compilation timestamp:
6/4/2013 8:34:19 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1536:RQemBUbWeCw6xJJc+pLHUDrn8ltOcExqeDpmG4E+hMXOZLcWxYmFEBy:RQea7eCw69cILHUHxceFmGuxZL3EBy

Entry address:
0x6563

Entry point:
E8, B4, 14, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 8B, 00, 81, 38, 63, 73, 6D, E0, 75, 2A, 83, 78, 10, 03, 75, 24, 8B, 40, 14, 3D, 20, 05, 93, 19, 74, 15, 3D, 21, 05, 93, 19, 74, 0E, 3D, 22, 05, 93, 19, 74, 07, 3D, 00, 40, 99, 01, 75, 05, E8, 09, 15, 00, 00, 33, C0, 5D, C2, 04, 00, 68, 6D, 65, 40, 00, FF, 15, 08, D1, 40, 00, 33, C0, C3, 8B, FF, 55, 8B, EC, 57, BF, E8, 03, 00, 00, 57, FF, 15, 10, D1, 40, 00, FF, 75, 08, FF, 15, 0C, D1, 40, 00, 81, C7, E8, 03, 00, 00, 81, FF, 60, EA, 00...
 
[+]

Entropy:
6.4538

Code size:
45.5 KB (46,592 bytes)

Remove {03312408-c523-e469-c612-c061c8550871}.exe - Powered by Reason Core Security