home

{0c336eb4-045f-756e-5c91-22ba8905e31e}-setup_gmsd_tr.exe

The application {0c336eb4-045f-756e-5c91-22ba8905e31e}-setup_gmsd_tr.exe has been detected as a potentially unwanted program by 16 anti-malware scanners. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
MD5:
9b91e04992e6bf3770e0fe3c1cf69d49

SHA-1:
92d029678551467359b9e5844eccecfc3a6dd2d2

SHA-256:
565bdc6cd6ef07f7e97fa321f0a2fb46199bcca8157dd44a925da43ccfb11ed8

Scanner detections:
16 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
4/25/2024 7:22:47 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Adware.Eorezo.BZ
5734772

Avira AntiVirus
PUA/InstallCore.Gen7
8.3.2.2

Arcabit
Adware.Eorezo.BZ
1.0.0.582

AVG
Generic
2016.0.2962

Bitdefender
Adware.Eorezo.BZ
1.0.20.1410

Dr.Web
Adware.Downware.10601, Adware.Downware.9051
9.0.1.05190

Emsisoft Anti-Malware
Adware.Eorezo.BZ
10.0.0.5366

F-Secure
Adware.Eorezo.BZ
5.14.151

G Data
Adware.Eorezo.BZ
15.10.25

IKARUS anti.virus
not-a-virus:AdWare.Eorezo
t3scan.1.9.5.0

Kaspersky
not-a-virus:AdWare.Win32.Eorezo
15.0.0.463

MicroWorld eScan
Adware.Eorezo.BZ
16.0.0.846

NANO AntiVirus
Riskware.Win32.Eorezo.dwryth
0.30.26.3947

Norman
Adware.Eorezo.BZ
04.08.2015 10:30:46

nProtect
Adware.Eorezo.BZ
15.10.08.01

Quick Heal
PUA.AdwareEorezo.DC8
10.15.14.00

File size:
5.6 MB (5,840,152 bytes)

File type:
Executable application (Win64 EXE)

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
98304:BubdKNr7oY1EdOSOGd8cdJFnBEedF7VWihqW1/5nEVZWjaZ7al9lB7iWWlYeZe7:KdsrEY1Eac8cdJpBEIJJhB96KWZGl9ll

Entry point:
B2, A5, AF, FF, FD, FF, FF, FF, FB, FF, F0, FF, 00, 00, FF, FF, 47, FF, FF, FF, FF, FF, FF, FF, BF, FF, E5, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FE, FF, FF, 45, EF, FF, F1, E0, 4B, F6, 32, DE, 47, FE, B3, 32, DE, 6F, 6F, AB, 97, 96, 8C, DF, 8F, 8D, 90, 98, 8D, 9E, 92, DF, 92, 8A, 8C, 8B, DF, 9D, 9A, DF, 8D, 8A, 91, DF, 8A, 91, 9B, 9A, 8D, DF, A8, 96, 91, CC, CD, F2, F5, DB, C8, FF, FF, FF, FF, FF, FF, FF, FF...
 
[+]

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.