home

1347229410.exe

ithwor

Any-Video-Converter.com

The executable 1347229410.exe has been detected as malware by 31 anti-virus scanners.
Publisher:
Any-Video-Converter.com

Product:
ithwor

Description:
Melodram skait

Version:
1.73.0048

MD5:
a37b03ff8fb690b07517e865987de3ab

SHA-1:
3c5b0c9dcd74b676d6bde6a9b5072c7f530dfe78

Scanner detections:
31 / 68

Status:
Malware

Analysis date:
4/24/2024 7:05:52 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.GenericKD.1595200
1017

Agnitum Outpost
Trojan.Inject
7.1.1

AhnLab V3 Security
Spyware/Win32.Zbot
14.04.24

Avira AntiVirus
TR/Dropper.VB.12960
7.11.138.34

avast!
Win32:Malware-gen
2014.9-140424

AVG
Inject2
2015.0.3495

Baidu Antivirus
Trojan.Win32.Inject
4.0.3.14424

Bitdefender
Trojan.GenericKD.1595200
1.0.20.570

Bkav FE
HW32.CDB
1.3.0.4959

Comodo Security
TrojWare.Win32.Injector.AREY
17966

Dr.Web
Trojan.DownLoader9.42260
9.0.1.0114

Emsisoft Anti-Malware
Trojan.GenericKD.1595200
8.14.04.24.11

ESET NOD32
Win32/Injector.AYZJ (variant)
8.9569

Fortinet FortiGate
W32/Boaxxe.BVB!tr
4/24/2014

F-Secure
Trojan.GenericKD.1595200
11.2014-24-04_5

G Data
Trojan.GenericKD.1595200
14.4.24

IKARUS anti.virus
Trojan.Win32.Inject
t3scan.2.2.29

K7 AntiVirus
Trojan
13.176.11510

Kaspersky
Trojan.Win32.Inject
14.0.0.3968

Malwarebytes
Spyware.Zbot
v2014.04.24.11

McAfee
RDN/Generic PWS.y!yt
5600.7151

MicroWorld eScan
Trojan.GenericKD.1595200
15.0.0.342

Norman
Suspicious_Gen4.FWXUG
11.20140424

nProtect
Trojan.GenericKD.1595200
14.03.21.01

Panda Antivirus
Generic Malware
14.04.24.11

Qihoo 360 Security
Win32/Trojan.2de
1.0.0.1015

Rising Antivirus
PE:Malware.XPACK-HIE/Heur!1.9C48
23.00.65.14422

Sophos
Mal/Generic-S
4.98

Trend Micro House Call
TROJ_GEN.R0CBC0PC914
7.2.114

Trend Micro
TROJ_GEN.R0CBC0PC914
10.465.24

VIPRE Antivirus
Trojan.Win32.Generic
27596

File size:
812 KB (831,488 bytes)

Product version:
1.73.0048

Copyright:
Taberd oxytone' otium 2001

Original file name:
Terribil.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\Local settings\temp\1347229410.exe

File PE Metadata
Compilation timestamp:
3/4/2014 9:59:32 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:6A8DbSs/H3Vgi8QDVwGxfJoU/xXvaPWq4O1gIGLh2RabNpuH7Nn3C:6PSwlrXOGxBoWxAWq31/G12HH5n3

Entry address:
0x12EC

Entry point:
68, F4, 14, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, F4, 35, 19, 14, BB, B4, B0, 4B, 99, 7C, 22, D9, 2B, AD, 55, F6, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, EE, 01, 00, 00, 00, 00, 63, 6F, 6D, 70, 6C, 65, 78, 69, 6F, 6E, 6C, 65, 73, 73, 73, 00, 00, 00, 00, 00, FF, CC, 31, 00, 01, 5B, 6A, 01, 66, 42, 7F, 06, 4E, 80, 3B, 8F, 03, D2, EC, D8, 3D, BB, E3, 7F, 41, DB, 6A, D6, 49, AF, 72, 0C, 38, C9, FA, 67, 38, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
7.9094

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
800 KB (819,200 bytes)

Remove 1347229410.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.