home

5c25.tmp

The file 5c25.tmp has been detected as malware by 25 anti-virus scanners.
MD5:
8012db4625bb7134310d55903773b40f

SHA-1:
481e5cc756b9332195eb4a6d60b909116b34930a

SHA-256:
ea69048d948b130619902d6d659744e85f8f0e1ef705a52f915eb923c115a890

Scanner detections:
25 / 68

Status:
Malware

Analysis date:
4/19/2024 8:15:21 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Mikey.15327
577

Agnitum Outpost
Backdoor.Androm
7.1.1

Avira AntiVirus
TR/Crypt.ZPACK.Gen4
8.3.1.6

Arcabit
Trojan.Mikey.D3BDF
1.0.0.425

avast!
Win32:Trojan-gen
2014.9-150707

AVG
Crypt4
2016.0.3055

Bitdefender
Gen:Variant.Mikey.15327
1.0.20.940

Dr.Web
Trojan.Siggen.65341
9.0.1.0188

Emsisoft Anti-Malware
Gen:Variant.Mikey.15327
8.15.07.07.03

ESET NOD32
Win32/Kryptik.DLVS (variant)
9.11801

F-Secure
Gen:Variant.Mikey.15327
11.2015-07-07_3

G Data
Gen:Variant.Mikey.15327
15.7.25

IKARUS anti.virus
Trojan.Win32.Crypt
t3scan.1.9.5.0

Kaspersky
Backdoor.Win32.Androm
14.0.0.1772

Malwarebytes
Trojan.Agent.UKPED
v2015.07.07.03

McAfee
Artemis!8012DB4625BB
5600.6711

Microsoft Security Essentials
Worm:Win32/Gamarue!rfn
1.1.11701.0

MicroWorld eScan
Gen:Variant.Mikey.15327
16.0.0.564

NANO AntiVirus
Trojan.Win32.Androm.dsrgfs
0.30.24.2086

Panda Antivirus
Trj/Genetic.gen
15.07.07.03

Rising Antivirus
PE:Malware.Obscure!1.9C59
23.00.65.15705

Sophos
Mal/Generic-S
4.98

Trend Micro House Call
TROJ_GEN.R0C1C0DFG15
7.2.188

Trend Micro
TROJ_GEN.R0C1C0DFG15
10.465.07

VIPRE Antivirus
Trojan.Win32.Generic
41218

File size:
119.5 KB (122,368 bytes)

Common path:
C:\users\{user}\appdata\local\temp\5c25.tmp

File PE Metadata
Compilation timestamp:
6/10/2015 1:37:02 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1536:GuY/7lEmn7lyc+NfaV99i8oTsUzSDh6WRmq6XQ3nLqTODFWOFMV1xMVAJ3LaY+4u:V4xkcezSlvRt6uRDwOSGWBLT+8O

Entry address:
0xA642

Entry point:
E8, DA, 55, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 4C, 56, 8D, 45, B4, 50, FF, 15, D4, 41, 41, 00, 6A, 40, 6A, 20, 5E, 56, E8, 97, 56, 00, 00, 59, 59, 33, C9, 3B, C1, 75, 08, 83, C8, FF, E9, 0F, 02, 00, 00, 8D, 90, 00, 08, 00, 00, A3, C0, B0, 41, 00, 89, 35, A4, B0, 41, 00, 3B, C2, 73, 36, 83, C0, 05, 83, 48, FB, FF, 66, C7, 40, FF, 00, 0A, 89, 48, 03, 66, C7, 40, 1F, 00, 0A, C6, 40, 21, 0A, 89, 48, 33, 88, 48, 2F, 8B, 35, C0, B0, 41, 00, 83, C0, 40, 8D, 50, FB, 81, C6, 00, 08, 00, 00, 3B...
 
[+]

Entropy:
6.7458

Code size:
73.5 KB (75,264 bytes)

Remove 5c25.tmp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.