home

aspnet_state.exe

Launcher By Antonio96

The executable aspnet_state.exe has been detected as malware by 21 anti-virus scanners.
Product:
Launcher By Antonio96

Version:
1.0.0.0

MD5:
a830bb1e5e1213efb8b4a8316891201d

SHA-1:
8193a6e6924f3535d8552e474007ee9ba54be04f

SHA-256:
16df0d62ae68eaca9cd2e9f69909529699a6b5b9fd5158aa3a2010d85d4c72b5

Scanner detections:
21 / 68

Status:
Malware

Analysis date:
5/10/2024 11:41:20 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.GenericKD.1738675
920

Agnitum Outpost
Trojan.Injector
7.1.1

Avira AntiVirus
TR/Injector.edl.3
7.11.159.188

avast!
Win32:Malware-gen
2014.9-140730

AVG
MSIL4
2015.0.3398

Bitdefender
Trojan.GenericKD.1738675
1.0.20.1055

Comodo Security
UnclassifiedMalware
18825

Dr.Web
Tool.MailPassView.236
9.0.1.0211

Emsisoft Anti-Malware
Trojan.GenericKD.1738675
8.14.07.30.04

ESET NOD32
MSIL/Injector.EDL (variant)
8.10072

Fortinet FortiGate
MSIL/Injector.EDL!tr
7/30/2014

F-Secure
Trojan.GenericKD.1738675
11.2014-30-07_4

G Data
Trojan.GenericKD.1738675
14.7.24

IKARUS anti.virus
Trojan.MSIL.Injector
t3scan.1.6.1.0

McAfee
Artemis!A830BB1E5E12
5600.7054

MicroWorld eScan
Trojan.GenericKD.1738675
15.0.0.633

NANO AntiVirus
Riskware.Win32.MailPassView.dbxynv
0.28.0.60698

Qihoo 360 Security
HEUR/Malware.QVM03.Gen
1.0.0.1015

Trend Micro House Call
TROJ_GEN.R047C0OG714
7.2.211

Trend Micro
TROJ_GEN.R047C0OG714
10.465.30

VIPRE Antivirus
Trojan.Win32.Generic
31130

File size:
4.1 MB (4,324,864 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2014

Original file name:
Launcher By Antonio96.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\roaming\microsoft\windows\aspnet_state.exe

File PE Metadata
Compilation timestamp:
7/1/2014 11:44:28 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
98304:Yjt9K1H5wIpv6Q1kCo1FyyOmOv232stEz2qzEI:emHvHIcyOmEgYh7

Entry address:
0x408ACE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.9892

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
4 MB (4,221,952 bytes)

Remove aspnet_state.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.