home

{5c258afc-e5a1-f7ca-7c72-3560bdb97b5a}.exe

The executable {5c258afc-e5a1-f7ca-7c72-3560bdb97b5a}.exe has been detected as malware by 5 anti-virus scanners.
MD5:
709319c8c813c173a2bca7e22b9a446d

SHA-1:
6533aa9388d6f66d1dac2f08bd06c2d77d2cc199

SHA-256:
076df00202232ab4955e1ba893f339e48c99ddf799fc66e55b93db2a5284ace4

Scanner detections:
5 / 68

Status:
Malware

Analysis date:
4/26/2024 12:13:22 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Dropper.Gen
7.11.30.172

Bkav FE
HW32.CDB
1.3.0.4959

ESET NOD32
Win32/Kryptik.CHLT (variant)
8.10152

Qihoo 360 Security
Malware.QVM20.Gen
1.0.0.1015

Rising Antivirus
PE:Malware.XPACK-HIE/Heur!1.9C48
23.00.65.14723

File size:
313.5 KB (321,068 bytes)

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\ProgramData\microsoft\{5c258afc-e5a1-f7ca-7c72-3560bdb97b5a}\{5c258afc-e5a1-f7ca-7c72-3560bdb97b5a}.exe

File PE Metadata
Compilation timestamp:
7/12/2014 6:07:34 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.185

CTPH (ssdeep):
6144:gsJwkRANwCLRAc8A/MY8O7WP4zbuVWs5CdghcMt0cDR6nRG2SX:LwVfLRAc3F8sbsNrYnRPG

Entry address:
0x30AC

Entry point:
55, E9, 79, FE, FF, FF, 51, B7, 76, 4F, 03, FE, 58, 42, E8, 14, 01, 00, 00, 01, 15, 84, 82, 40, 00, 50, 8B, F2, E8, BD, 00, 00, 00, 47, 58, 47, 33, C9, 42, 05, 3C, 0B, 00, 00, 2B, F8, 89, 3D, 74, 55, 40, 00, 5F, 5E, 0F, BF, D1, 5B, 5A, 5D, 59, 40, 51, FF, 34, 24, 48, 50, 8B, 6C, 24, 0C, C3, 55, 2B, C3, 52, 53, 56, 49, 57, 83, F3, 08, 8B, 44, 24, 14, 50, E8, 25, 00, 00, 00, E8, DB, 01, 00, 00, 50, 89, 1D, 29, 51, 40, 00, 8D, 2C, 02, 03, E9, 4B, 03, DF, 29, 1D, BC, 54, 40, 00, 8D, 59, 57, 03, 1D, 93, 98, 41...
 
[+]

Entropy:
6.4018

Code size:
9 KB (9,216 bytes)

Policies Explorer Run
Name:
{5c258afc-e5a1-f7ca-7c72-3560bdb97b5a}


Remove {5c258afc-e5a1-f7ca-7c72-3560bdb97b5a}.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.