home

{4000de88-0fb6-48c3-bbc7-92c8f1024c21}

The file {4000de88-0fb6-48c3-bbc7-92c8f1024c21} has been detected as malware by 40 anti-virus scanners.
MD5:
4f46006cebc8043aaf4735d1a95ecc67

SHA-1:
5c424807c3a6e48844aa998a10c186f178f0f92b

SHA-256:
cf4cfccdc8de84044d6cbd5ab3d470392c92afd25bf6657df2a99a76248f3eb3

Scanner detections:
40 / 68

Status:
Malware

Analysis date:
4/23/2024 10:21:02 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
GenPack:Backdoor.Generic.220832
856

Agnitum Outpost
Backdoor.FlyAgent
7.1.1

AhnLab V3 Security
Win32/Flystudio.worm.Gen
14.10.02

Avira AntiVirus
TR/Dropper.Gen
7.11.138.132

avast!
Win32:EvilEPL [Cryp]
2014.9-141002

AVG
Win32/Heur
2015.0.3334

Baidu Antivirus
Trojan.Win32.FlyStudio
4.0.3.14102

Bitdefender
GenPack:Backdoor.Generic.220832
1.0.20.1375

Bkav FE
W32.FlyStudioTn
1.3.0.4959

Clam AntiVirus
Worm.FlyStudio-15
0.98/18355

Comodo Security
TrojWare.Win32.Agent.btho
17982

Dr.Web
Win32.HLLW.Autoruner.26035
9.0.1.0275

Emsisoft Anti-Malware
GenPack:Backdoor.Generic.220832
8.14.10.02.04

ESET NOD32
Win32/Packed.FlyStudio.O.Gen
8.9582

Fortinet FortiGate
W32/PckdFlyStudio.gen
10/2/2014

F-Prot
W32/Nuj.A.gen
v6.4.7.1.166

F-Secure
Trojan-Dropper:W32/Peed.gen!A
11.2014-02-10_5

G Data
GenPack:Backdoor.Generic.220832
14.10.24

IKARUS anti.virus
Worm.Win32.FlyStudio
t3scan.2.2.29

K7 AntiVirus
Trojan
13.176.11524

Kaspersky
Trojan-Downloader.Win32.FlyStudio
14.0.0.3164

McAfee
W32/Autorun.worm.ev
5600.6990

Microsoft Security Essentials
Backdoor:Win32/FlyAgent.F
1.10401

MicroWorld eScan
GenPack:Backdoor.Generic.220832
15.0.0.825

NANO AntiVirus
Trojan.Win32.Flystud.besfc
0.28.0.58491

Norman
FlyAgent.CX
11.20141002

nProtect
Trojan-Dropper/W32.FlyStudio.1406067
14.03.23.01

Panda Antivirus
W32/FlySky.W
14.10.02.04

Qihoo 360 Security
Win32/Trojan.d71
1.0.0.1015

Quick Heal
Backdoor.FlyAgent.F
10.14.12.00

Rising Antivirus
PE:Malware.FakeFolder@CV!1.6AA9
23.00.65.14930

Sophos
Mal/EncPk-NB
4.98

SUPERAntiSpyware
Trojan.Agent/Gen-Fly[Large]
10325

Total Defense
Win32/Nuj.B!generic
37.0.10836

Trend Micro House Call
TROJ_GEN.F47V0307
7.2.275

Trend Micro
WORM_AUTORUN.SMW
10.465.02

Vba32 AntiVirus
TrojanDownloader.FlyStudio
3.12.24.3

VIPRE Antivirus
Trojan.Win32.Autorun.dm
27690

ViRobot
Worm.Win32.S.Flystudio.1406067
2011.4.7.4223

XVirus List
Win32.Detected
2.10.2

File size:
1.3 MB (1,406,067 bytes)

File PE Metadata
Compilation timestamp:
12/25/1972 11:33:23 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
4.0

CTPH (ssdeep):
24576:L9Jhs0gqUkUoNdc7U0VZGS356ok5qrb/+3/52Gam/IeWOLFiNzcNX:jC0XXUoM7U07GS3PnK3/h/IDO5GzcNX

Entry address:
0x140B

Entry point:
50, 53, 57, 52, 56, 33, DB, 51, 0F, 84, A1, FE, FF, FF, 92, 6A, E2, 62, DA, 75, CC, 46, DD, B5, DA, BF, 94, 6B, 17, 39, 21, BD, 2A, 46, 55, 36, A0, BF, 2B, B5, DA, C3, 10, 3C, 02, A7, 9D, 35, 6A, 3C, FD, 86, 28, BB, 11, B7, D7, 2F, 20, 35, DA, 0E, 62, 82, FF, 0F, 12, 32, 17, 3E, D6, 3A, 72, 13, 9D, 25, 99, A9, 12, 32, 57, BB, 85, 76, A2, 0B, 16, 35, EA, 46, 5A, 3A, 9A, B4, 12, B0, 4E, 46, 14, 35, DA, 46, 8C, 36, 42, 8A, 63, B5, 06, C3, E2, 21, 9B, 7D, 1A, 65, E0, 3E, 11, 33, 8B, D6, 77, BD, 21, 3E, D4, 34...
 
[+]

Code size:
24 KB (24,576 bytes)

Remove {4000de88-0fb6-48c3-bbc7-92c8f1024c21} - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.