home

{3012d52f-891f-4092-931b-c6d095745a89}

Windows

The file {3012d52f-891f-4092-931b-c6d095745a89} has been detected as malware by 15 anti-virus scanners.
Product:
Windows

Version:
1.0.0.0

MD5:
9790e98ffbf44ed82701e4c8b13ede35

SHA-1:
f0779a83f9891c4ccee5e6a605ed1455b41f47bb

SHA-256:
2aa5ca6775917a5ad6d632042b217f829d5d09716740a48d9894121ada841d72

Scanner detections:
15 / 68

Status:
Malware

Analysis date:
4/26/2024 3:18:30 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Strictor.12218
856

Avira AntiVirus
TR/Dropper.Gen
7.11.170.218

avast!
MSIL:GenMalicious-R [Trj]
2014.9-141002

AVG
Luhe.Fiha.A
2015.0.3334

Baidu Antivirus
Trojan.MSIL.Injector
4.0.3.14102

Bitdefender
Gen:Variant.Strictor.12218
1.0.20.1375

Emsisoft Anti-Malware
Gen:Variant.Strictor.12218
8.14.10.02.04

ESET NOD32
MSIL/Injector.BLX (variant)
8.10366

F-Secure
Gen:Variant.Strictor.12218
11.2014-02-10_5

G Data
Gen:Variant.Strictor.12218
14.10.24

IKARUS anti.virus
Trojan.SuspectCRC
t3scan.1.7.5.0

MicroWorld eScan
Gen:Variant.Strictor.12218
15.0.0.825

Norman
Agent.BAQOI
11.20141002

Qihoo 360 Security
Win32/Trojan.088
1.0.0.1015

VIPRE Antivirus
Trojan.Win32.Generic.pak!cobra
32800

File size:
145 KB (148,480 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2014

Original file name:
Windows.exe

File PE Metadata
Compilation timestamp:
9/3/2014 6:12:37 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:V5jb8nHUc8dzNvFluuYhvVwC90e+WXKyNhwkBRkL+bAs:jn8HsrFShv+C+e+GNLBRRA

Entry address:
0xE4CE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
49.5 KB (50,688 bytes)

Remove {3012d52f-891f-4092-931b-c6d095745a89} - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.