home

2015

The Witcher 3

Foxit Corporation

The file 2015 has been detected as malware by 11 anti-virus scanners.
Publisher:
CD Projekt Red  (signed by Foxit Corporation)

Product:
The Witcher 3

Version:
3.0.0

MD5:
8940a58c677f9934df49641f169a1f97

SHA-1:
bf522600d8d264ccb34f5d18977c29467a0c7143

SHA-256:
df12d31d83a2ee6fbf7cd07e049c098ef3b0357df3bd51c9a48850b1cf7876a6

Scanner detections:
11 / 68

Status:
Malware

Analysis date:
4/19/2024 2:48:42 PM UTC  (today)

Scan engine
Detection
Engine version

AhnLab V3 Security
Trojan/Win32.Agent.N2096178165
3.7.5.15

Avira AntiVirus
TR/Dropper.MSIL.qojh
8.3.3.4

avast!
Win32:Malware-gen
2014.9-170314

Baidu Antivirus
Win32.Trojan.WisdomEyes.151026.9950
4.0.3.17314

ESET NOD32
MSIL/Kryptik.GZH (variant)
11.14064

Fortinet FortiGate
W32/Generic!tr
3/14/2017

F-Prot
W32/MSIL_Injector.CE.gen
v6.4.7.1.166

Kaspersky
HEUR:Trojan.Win32.Generic
14.0.0.-1306

McAfee
Artemis!8940A58C677F
5600.6096

Qihoo 360 Security
HEUR/QVM03.0.0000.Malware.Gen
1.0.0.1120

SUPERAntiSpyware
Trojan.Agent/Gen-Dynamer
8537

File size:
810.1 KB (829,504 bytes)

Product version:
3.0.0

Copyright:
Copyright © 2012 CD Projekt Red.

Original file name:
Scan022.exe

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\2015

Digital Signature
Signed by:
Foxit Corporation

Authority:
Starfield Technologies, Inc.

Valid from:
5/3/2013 1:26:10 PM

Valid to:
5/4/2016 2:03:52 AM

Subject:
CN=Foxit Corporation, O=Foxit Corporation, L=Fremont, S=CA, C=US

Issuer:
SERIALNUMBER=10688435, CN=Starfield Secure Certification Authority, OU=http://certificates.starfieldtech.com/repository, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
04430E53296BF1

File PE Metadata
Compilation timestamp:
8/31/2016 1:39:32 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

Entry address:
0xC5FCE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 03, 00, 00, 00, 30, 00, 00, 80, 0E, 00, 00, 00, 48, 00, 00, 80, 10, 00, 00, 00, 60, 00, 00, 80, 18, 00, 00, 00, 78, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 02, 00, 00, 00, 90, 00, 00, 80, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.1913

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
784 KB (802,816 bytes)

Remove 2015 - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.