home

7f55393eb6a417806be852f20a32f9ef.exe

yyyyyyyyy

The executable 7f55393eb6a417806be852f20a32f9ef.exe has been detected as malware by 18 anti-virus scanners.
Publisher:
Microsoft*  (Invalid match)

Product:
yyyyyyyyy

Version:
1.0.0.0

MD5:
7f55393eb6a417806be852f20a32f9ef

SHA-1:
fdfc9061106810d239c9ba5f126cbe09ac8e5c31

SHA-256:
e2ae024aa22568704d27ffdb4214cdd27523ef32046e23d07c54e2da8298b8ee

Scanner detections:
18 / 68

Status:
Malware

Analysis date:
5/3/2024 6:41:56 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.GenericKD.2051299
770

avast!
Win32:Dropper-gen [Drp]
2014.9-141227

Baidu Antivirus
Trojan.MSIL.Steamilik
4.0.3.141227

Bitdefender
Trojan.GenericKD.2051299
1.0.20.1805

Dr.Web
Trojan.Siggen6.26583
9.0.1.0361

Emsisoft Anti-Malware
Trojan.GenericKD.2051299
8.14.12.27.05

ESET NOD32
MSIL/TrojanDropper.Agent.BJB
8.10931

Fortinet FortiGate
W32/Steamilik.BMS!tr.dldr
12/27/2014

F-Secure
Trojan.GenericKD.2051299
11.2014-27-12_7

Kaspersky
Trojan-Downloader.MSIL.Steamilik
14.0.0.2734

Malwarebytes
Backdoor.Bot
v2014.12.27.05

MicroWorld eScan
Trojan.GenericKD.2051299
15.0.0.1083

Panda Antivirus
Generic Suspicious
14.12.27.05

Qihoo 360 Security
HEUR/QVM03.0.Malware.Gen
1.0.0.1015

Quick Heal
(Suspicious) - DNAScan
12.14.14.00

Sophos
Mal/Generic-S
4.98

Trend Micro House Call
TROJ_GEN.R047H07LQ14
7.2.361

VIPRE Antivirus
Softonic Downloader
36120

File size:
398.5 KB (408,064 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © Microsoft 2014

Original file name:
yyyyyyyyy.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
12/26/2014 12:55:21 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:QAmuAmRStto8gHBafdR3dSW6LyapvkJJIrXjL2opekgz6SpeoSYizK0ZJGI:QoAQSte/HOdRGmap8JATyrk5SgoSYR8

Entry address:
0x61CBE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.8510

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
383.5 KB (392,704 bytes)

Remove 7f55393eb6a417806be852f20a32f9ef.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.