home

{0b272eee-0ab4-ee14-8800-50e58616b7cd}-gmsd_ru_025010040.exe

The application {0b272eee-0ab4-ee14-8800-50e58616b7cd}-gmsd_ru_025010040.exe has been detected as a potentially unwanted program by 17 anti-malware scanners.
MD5:
6ef6c28bcc84cf8c0ca173c5f8696763

SHA-1:
41c17c307f5eee7fd449909c9366e53914ada67f

SHA-256:
e1b99551752338dce68a6965ae09f1db2191e9b6a8c0b8f76139c4eae925ec3e

Scanner detections:
17 / 68

Status:
Potentially unwanted

Analysis date:
4/30/2024 11:49:05 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Adware.Eorezo.1
511

Avira AntiVirus
ADWARE/Adware.Gen7
8.3.1.6

Arcabit
Trojan.Adware.Eorezo.1
1.0.0.425

AVG
Generic
2016.0.3027

Bitdefender
Gen:Variant.Adware.Eorezo.1
1.0.20.1270

Dr.Web
Adware.Downware.11305
9.0.1.0217

Emsisoft Anti-Malware
Gen:Variant.Adware.Eorezo
8.15.09.11.01

F-Prot
W32/Downware.E.gen
v6.4.7.1.166

F-Secure
Gen:Variant.Adware.Eorezo
11.2015-11-09_6

herdProtect (fuzzy)
variant of {52b93486-86aa-7eba-40f8-02a73ea5aaee}-ospd_us_014010047.exe
2015.9.11.13

Kaspersky
not-a-virus:AdWare.Win32.Eorezo
14.0.0.1628

MicroWorld eScan
Gen:Variant.Adware.Eorezo.1
16.0.0.762

NANO AntiVirus
Riskware.Win32.Eorezo.dupqcn
0.30.24.2668

Norman
Gen:Variant.Adware.Eorezo.1
11.20150911

Sophos
PUA 'Eorezo' (of type Adware)
5.15

Vba32 AntiVirus
AdWare.Eorezo
3.12.26.4

File size:
3.8 MB (3,982,992 bytes)

File type:
Executable application (Win64 EXE)

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
98304:KgAAE4goxHz0Jga6N9MvCqPNfoI53IQ9qf0vFvQMpfXqTiUlpluBA9JuRUoAVz2b:asTJjMdlfDtlUcv5JpyTiUlpluBA9JuH

Entry point:
B2, A5, 6F, FF, FC, FF, FF, FF, FB, FF, FF, FF, 00, 00, FF, FF, 47, FF, FF, FF, FF, FF, FF, FF, BF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FE, FF, FF, F1, E0, 45, F1, FF, 4B, F6, 32, DE, 47, FE, B3, 32, DE, AB, 97, 96, 8C, DF, 8F, 8D, 90, 98, 8D, 9E, 92, DF, 9C, 9E, 91, 91, 90, 8B, DF, 9D, 9A, DF, 8D, 8A, 91, DF, 96, 91, DF, BB, B0, AC, DF, 92, 90, 9B, 9A, D1, F2, F2, F5, DB, FF, FF, FF, FF, FF, FF, FF...
 
[+]

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.