home

{381a100f-8669-4608-9770-0c0382a9bd1d}

The file {381a100f-8669-4608-9770-0c0382a9bd1d} has been detected as malware by 42 anti-virus scanners.
MD5:
47af54ad91b5f4cecced9b4b76f32b3d

SHA-1:
7bff4f3f41158c37461b4d4bd14a0a04224ecae5

SHA-256:
1b815bd5957ca05c5fd885ff3d2091fee9552ba70bd5d00bb20596716337bcaf

Scanner detections:
42 / 68

Status:
Malware

Analysis date:
4/20/2024 1:06:21 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Delf.15
856

Agnitum Outpost
Backdoor.DarkKomet
7.1.1

AhnLab V3 Security
Trojan/Win32.Siscos
2014.07.05

Avira AntiVirus
TR/Spy.Gen2
7.11.158.148

avast!
Win32:Flooder-GR [Trj]
2014.9-141002

AVG
Delf
2015.0.3334

Baidu Antivirus
Backdoor.Win32.DarkKomet
4.0.3.14102

Bitdefender
Gen:Variant.Delf.15
1.0.20.1375

Bkav FE
W32.UserinitSysupdLnr.Trojan
1.3.0.4959

Clam AntiVirus
Trojan.Delf-10754
0.98/21411

Comodo Security
Backdoor.Win32.DarkC.~A
18771

Dr.Web
Trojan.PWS.Spy.11887
9.0.1.0275

Emsisoft Anti-Malware
Gen:Variant.Delf.15
8.14.10.02.04

ESET NOD32
Win32/Delf.NVC
8.10048

Fortinet FortiGate
W32/COMDAR.SMI!tr
10/2/2014

F-Prot
W32/Downloader.C.gen
v6.4.7.1.166

F-Secure
Gen:Variant.Delf.15
11.2014-02-10_5

G Data
Gen:Variant.Delf.15
14.10.24

IKARUS anti.virus
Trojan.Win32.CDur
t3scan.1.6.1.0

K7 AntiVirus
Backdoor
13.180.12626

Kaspersky
Backdoor.Win32.DarkKomet
14.0.0.3164

Malwarebytes
Backdoor.Fynloski
v2014.10.02.04

McAfee
BackDoor-EZG.d
5600.6990

Microsoft Security Essentials
Backdoor:Win32/Fynloski.A
1.10701

MicroWorld eScan
Gen:Variant.Delf.15
15.0.0.825

NANO AntiVirus
Trojan.Win32.Fynloski.dfbjp
0.28.0.60577

Norman
Fynloski.DS
11.20141002

nProtect
Trojan/W32.Agent.763392.AW
14.07.04.01

Panda Antivirus
Generic Backdoor
14.10.02.04

Qihoo 360 Security
Win32/Trojan.785
1.0.0.1015

Quick Heal
Backdoor.Agent.r9
10.14.14.00

Rising Antivirus
PE:Backdoor.Pontoeb!1.6637
23.00.65.14930

Sophos
Troj/StWrs-A
4.98

SUPERAntiSpyware
Heur.Agent/Gen-FakeChrome
10325

Total Defense
Win32/ SillyDL.YFY
37.0.11039

Trend Micro House Call
BKDR_FYNLOS.SMIA
7.2.275

Trend Micro
BKDR_FYNLOS.SMIA
10.465.02

Vba32 AntiVirus
Backdoor.DarkKomet.bggv
3.12.26.3

VIPRE Antivirus
Backdoor.Win32.Fynloski.A
30978

ViRobot
Backdoor.Win32.A.Agent.246272
2011.4.7.4223

XVirus List
Win32.Detected
2.10.2

Zillya! Antivirus
Trojan.Siscos.Win32.1583
2.0.0.1845

File size:
745.5 KB (763,392 bytes)

File PE Metadata
Compilation timestamp:
8/22/2011 12:43:38 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:s6A84PaHhfD/tV9sj5NKR0pau9XGyu2qBVGLQyTPfhoqMd0QZh9u:hAmBpVKHu0Mu9Xo20VGLVP5oD0QZh9u

Entry address:
0x8E828

Entry point:
55, 8B, EC, B9, 27, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 51, 53, 56, 57, B8, 00, D2, 48, 00, E8, 37, 8F, F7, FF, 33, C0, 55, 68, 88, F5, 48, 00, 64, FF, 30, 64, 89, 20, A1, 9C, 2A, 49, 00, 8B, 00, E8, C5, 78, FB, FF, A1, 9C, 2A, 49, 00, 8B, 00, E8, D1, 78, FB, FF, E8, C0, AC, FF, FF, B2, 01, A1, 50, CC, 48, 00, E8, 68, E4, FF, FF, 8B, D8, 8D, 45, EC, E8, 3E, B9, FF, FF, 8B, 55, EC, A1, 28, 28, 49, 00, E8, 31, 6C, F7, FF, 8D, 4D, E8, BA, A0, F5, 48, 00, 8B, C3, E8, FA, E4, FF, FF, 8B, 55, E8, A1, E8, 26...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
568.5 KB (582,144 bytes)

Remove {381a100f-8669-4608-9770-0c0382a9bd1d} - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.