home

63b2.tmp

The file 63b2.tmp has been detected as malware by 13 anti-virus scanners.
MD5:
d5040a25f367ff6e6e2cd2b4cc20fe12

SHA-1:
ac36106182bec44eb4d653e7b22cd0275ce43f02

SHA-256:
b6ecd5f4c7d50aae745b607ca1c4ec7802069b5ed548945d13b0fbe7956740ae

Scanner detections:
13 / 68

Status:
Malware

Analysis date:
4/18/2024 11:51:45 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Kazy.486575
827

Avira AntiVirus
TR/Simda.A.102
7.11.182.116

avast!
Win32:Malware-gen
141025-0

AVG
Crypt3
2015.0.3305

Baidu Antivirus
Trojan.Win32.Kryptik
4.0.3.141030

Bitdefender
Gen:Variant.Kazy.486575
1.0.20.1515

Emsisoft Anti-Malware
Gen:Variant.Kazy.486575
8.14.10.30.07

ESET NOD32
Win32/Kryptik.COTE (variant)
8.10646

G Data
Gen:Variant.Kazy.486575
14.10.24

Kaspersky
Backdoor.Win32.Simda
14.0.0.3021

Malwarebytes
Trojan.Agent.FSAVXGen
v2014.10.30.07

Qihoo 360 Security
Malware.QVM20.Gen
1.0.0.1015

Sophos
Troj/Agent-AJNX
4.98

File size:
540 KB (552,960 bytes)

Common path:
C:\users\{user}\appdata\local\temp\63b2.tmp

File PE Metadata
Compilation timestamp:
3/19/1989 2:10:08 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:rN3vc8xigIfx9jXP4Y46P1t9y6/7uuvTbjVDsTuz2zn:rNU8xCx9T4YTPTv/7uqTV+uz2

Entry address:
0x2B5E

Entry point:
55, 8D, 2C, 24, 8D, 64, 24, D0, 8B, 15, A6, 89, 40, 00, 83, C2, BF, 8B, 1D, A6, 89, 40, 00, 83, C3, 60, 0B, 1D, F0, 86, 40, 00, 81, 15, CC, 86, 40, 00, DB, 00, 00, 00, 01, 1D, C3, 86, 40, 00, 82, 2D, 7E, 87, 40, 00, C5, 8B, 3D, A6, 89, 40, 00, 01, DF, A1, A6, 89, 40, 00, 83, C0, 4A, 10, 1D, 25, 87, 40, 00, 28, 1D, 7A, 86, 40, 00, 6A, 00, 68, 58, 8A, 40, 00, 68, 49, 8A, 40, 00, FF, 15, 8C, 70, 40, 00, 83, F8, 00, 0F, 85, 95, 28, 00, 00, 81, 25, 72, 86, 40, 00, DC, 00, 00, 00, 8B, 35, A6, 89, 40, 00, 83, C6...
 
[+]

Code size:
24 KB (24,576 bytes)

Remove 63b2.tmp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.