home

{1b6c7611-c129-43eb-8204-c92a0b59233a}

srrg aeesf

The file {1b6c7611-c129-43eb-8204-c92a0b59233a}, “ Disk Diagnostic User Resolver” has been detected as malware by 31 anti-virus scanners.
Product:
srrg aeesf

Description:
Disk Diagnostic User Resolver

Version:
656.362.233

MD5:
63164516c9b455fb312af679beeaad23

SHA-1:
4581df91c4dd43472f29a8f9d76e775dd8e5ea5e

SHA-256:
3522caf271b1204ae60ba0ac368136b19c49630c263ff2a06fe2d715d526f6ce

Scanner detections:
31 / 68

Status:
Malware

Analysis date:
4/27/2024 3:08:54 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.GenericKD.1758295
856

Agnitum Outpost
Trojan.Inject
7.1.1

AhnLab V3 Security
Spyware/Win32.Limitail
2014.07.21

Avira AntiVirus
TR/Krypt.abz.1
7.11.163.22

avast!
Win32:Malware-gen
2014.9-141002

AVG
MSIL4
2015.0.3334

Baidu Antivirus
Trojan.MSIL.Kryptik
4.0.3.14102

Bitdefender
Trojan.GenericKD.1758295
1.0.20.1375

Comodo Security
UnclassifiedMalware
18908

Dr.Web
Trojan.BtcMine.323
9.0.1.0275

Emsisoft Anti-Malware
Trojan.GenericKD.1758295
8.14.10.02.03

ESET NOD32
MSIL/Kryptik.ABZ (variant)
8.10125

F-Secure
Trojan.GenericKD.1758295
11.2014-02-10_5

G Data
Trojan.GenericKD.1758295
14.10.24

IKARUS anti.virus
Trojan.Win32.Inject
t3scan.1.6.1.0

K7 AntiVirus
Trojan
13.181.12775

Kaspersky
Trojan.Win32.Inject
14.0.0.3164

Malwarebytes
Spyware.Password
v2014.10.02.03

McAfee
RDN/Generic.dx!ddz
5600.6990

Microsoft Security Essentials
Trojan:Win32/Dynamer!ac
1.10802

MicroWorld eScan
Trojan.GenericKD.1758295
15.0.0.825

NANO AntiVirus
Trojan.Win32.BtcMine.dcgarf
0.28.2.60881

Norman
Troj_Generic.UYJLQ
11.20141002

Panda Antivirus
Trj/CI.A
14.10.02.03

Qihoo 360 Security
HEUR/Malware.QVM03.Gen
1.0.0.1015

Quick Heal
Trojan.Inject.r3
10.14.14.00

Rising Antivirus
PE:Trojan.Win32.Generic.16FE1D64!385752420
23.00.65.14930

Sophos
Troj/Inject-AYF
4.98

Trend Micro House Call
TROJ_GEN.R0CBC0DGH14
7.2.275

Trend Micro
TROJ_GEN.R0CBC0DGH14
10.465.02

VIPRE Antivirus
Trojan.Win32.Generic
31436

File size:
208.5 KB (213,504 bytes)

Original file name:
kiss my ass

File PE Metadata
Compilation timestamp:
7/10/2014 9:58:56 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:XzkReV1eIyfZwhNlWYEAr60zYzutb0G+ANBdP0CFzxuffNq5/iC3S:XzkR2yfZMNlWYEIvtblhPNxu8

Entry address:
0x3565E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
206 KB (210,944 bytes)

Remove {1b6c7611-c129-43eb-8204-c92a0b59233a} - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.