home

{52b93486-86aa-7eba-40f8-02a73ea5aaee}-ospd_us_014010047.exe

The application {52b93486-86aa-7eba-40f8-02a73ea5aaee}-ospd_us_014010047.exe has been detected as a potentially unwanted program by 14 anti-malware scanners.
MD5:
d69b7843e17bac1173d956d5f3105cf0

SHA-1:
729c0a11b7e55095212ba356c534e2df2ce1a094

SHA-256:
994f8a4a451ec9d2c2a416f7ac93a29922388f7fb005898c8f7bab9adb848614

Scanner detections:
14 / 68

Status:
Potentially unwanted

Analysis date:
5/21/2024 11:00:54 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Adware.Eorezo.1
549

Avira AntiVirus
ADWARE/EoRezo.Gen4
8.3.1.6

Arcabit
Trojan.Adware.Eorezo.1
1.0.0.425

AVG
Generic
2016.0.3027

Bitdefender
Gen:Variant.Adware.Eorezo.1
1.0.20.1085

Dr.Web
Adware.Downware.11305
9.0.1.0217

Emsisoft Anti-Malware
Gen:Variant.Adware.Eorezo
8.15.08.05.04

F-Prot
W32/Downware.E.gen
v6.4.7.1.166

F-Secure
Gen:Variant.Adware.Eorezo
11.2015-05-08_4

G Data
Gen:Variant.Adware.Eorezo
15.8.25

herdProtect (fuzzy)
variant of {00153760-e698-93fe-bc83-182c7b9c7c4c}-gmsd_pl_005010047.exe
2015.9.11.5

Kaspersky
not-a-virus:AdWare.Win32.Eorezo
14.0.0.1629

MicroWorld eScan
Gen:Variant.Adware.Eorezo.1
16.0.0.651

Norman
Gen:Variant.Adware.Eorezo.1
11.20150805

File size:
3.8 MB (3,977,360 bytes)

File type:
Executable application (Win64 EXE)

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
98304:IgAAE4goxHz0Jga6N9MvCqPNfoI53IQ9qf0vFvQMpfXiTiUlpluBA9JuRUoAVz2k:gsTJjMdlfDtlUcv5JpqTiUlpluBA9JuA

Entry point:
B2, A5, 6F, FF, FC, FF, FF, FF, FB, FF, FF, FF, 00, 00, FF, FF, 47, FF, FF, FF, FF, FF, FF, FF, BF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FE, FF, FF, F1, E0, 45, F1, FF, 4B, F6, 32, DE, 47, FE, B3, 32, DE, AB, 97, 96, 8C, DF, 8F, 8D, 90, 98, 8D, 9E, 92, DF, 9C, 9E, 91, 91, 90, 8B, DF, 9D, 9A, DF, 8D, 8A, 91, DF, 96, 91, DF, BB, B0, AC, DF, 92, 90, 9B, 9A, D1, F2, F2, F5, DB, FF, FF, FF, FF, FF, FF, FF...
 
[+]

Entropy:
6.6340

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.