home

{43146b58-6f0c-43ba-b645-9dde4bfd1baa}

The file {43146b58-6f0c-43ba-b645-9dde4bfd1baa} has been detected as malware by 27 anti-virus scanners. According to AVG, this software downloads additional adware offers during setup.
Version:
8.4.4.4

MD5:
7dda36ce32c72c4827d54841680153d6

SHA-1:
b36351bdae57eb181a3c809facc774e39cc30514

SHA-256:
77059ff87ea4511dd87ab2aba9d5486822875b9536b86cbcc433ec43af0b591d

Scanner detections:
27 / 68

Status:
Malware

Analysis date:
4/23/2024 7:24:28 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Zusy.67750
856

Agnitum Outpost
Trojan.DL.Banload
7.1.1

AhnLab V3 Security
Malware/Win32.Generic
14.10.02

Avira AntiVirus
TR/Zusy.67750.99
7.11.143.18

avast!
Win32:Malware-gen
2014.9-141002

AVG
Downloader.Banload2
2015.0.3334

Baidu Antivirus
Trojan.Win32.Banload
4.0.3.14102

Bitdefender
Gen:Variant.Zusy.67750
1.0.20.1375

Clam AntiVirus
BC.Heuristic.Trojan.SusPacked.BF-6.A
0.98/18355

Comodo Security
UnclassifiedMalware
18093

Emsisoft Anti-Malware
Gen:Variant.Zusy.67750
8.14.10.02.04

ESET NOD32
Win32/TrojanDownloader.Banload.TED (variant)
8.9669

Fortinet FortiGate
W32/Banload.TED!tr.dldr
10/2/2014

F-Secure
Gen:Variant.Zusy.67750
11.2014-02-10_5

G Data
Gen:Variant.Zusy.67750
14.10.24

IKARUS anti.virus
Trojan-Downloader.Banload2
t3scan.1.6.1.0

K7 AntiVirus
Trojan-Downloader
13.176.11737

Kaspersky
Trojan.Win32.Agentb
14.0.0.3164

McAfee
RDN/PWS-Banker!da
5600.6990

MicroWorld eScan
Gen:Variant.Zusy.67750
15.0.0.825

Norman
Suspicious_Gen5.ANCXF
11.20141002

Panda Antivirus
Trj/Genetic.gen
14.10.02.04

Sophos
Troj/Delf-FSX
4.98

Trend Micro House Call
TROJ_SPNV.01CG14
7.2.275

Trend Micro
TROJ_SPNV.01CG14
10.465.02

VIPRE Antivirus
Trojan.Win32.Generic
28196

XVirus List
Win32.Detected
2.10.2

File size:
1013.5 KB (1,037,824 bytes)

Product version:
2.0

File PE Metadata
Compilation timestamp:
3/13/2014 4:10:24 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:VHQ/r11Y1hjNO89waO/QcmYq3xkna16Zvpdd0t/JLi/61ZF88888888888888W8/:RYJ16hpO8bOXmYq3sjvp/0t/JLiy

Entry address:
0xD2B04

Entry point:
55, 8B, EC, 83, C4, E8, 33, C0, 89, 45, E8, 89, 45, EC, B8, 2C, 10, 4D, 00, E8, 88, 58, F3, FF, 33, C0, 55, 68, D0, 2B, 4D, 00, 64, FF, 30, 64, 89, 20, E8, 71, E4, FF, FF, 84, C0, 74, 0E, A1, 08, 5D, 4D, 00, 8B, 00, E8, 3D, F2, F7, FF, EB, 74, E8, 96, 5E, F3, FF, 66, 3D, 16, 04, 75, 69, 8D, 55, EC, B8, E8, 2B, 4D, 00, E8, 27, DE, FF, FF, 8D, 45, EC, BA, 68, 2C, 4D, 00, E8, 02, 34, F3, FF, 8B, 45, EC, E8, FE, 9C, F3, FF, 84, C0, 75, 43, E8, 29, E2, FF, FF, 33, C9, B2, 01, A1, 58, EE, 4C, 00, E8, A3, 54, F7...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
837 KB (857,088 bytes)

Remove {43146b58-6f0c-43ba-b645-9dde4bfd1baa} - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.