home

{b4de37df-ebec-49ec-8f6c-03694c9ecfdc}

uvSoftium

The file {b4de37df-ebec-49ec-8f6c-03694c9ecfdc} has been detected as malware by 18 anti-virus scanners.
Publisher:
uvSoftium

Version:
4.7

MD5:
b6b5456246c0bf9483cfde9d65291e9e

SHA-1:
cc1b803c17ac14244a4c8fdbfa2d14030119756b

SHA-256:
856fafce3ef36a111e4fa8d69c87d1eb4c0509c3124b8ea701b8f2810f508ba0

Scanner detections:
18 / 68

Status:
Malware

Analysis date:
5/5/2024 3:13:54 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Trojan.Heur.TP.ts0@bGwDLsjc
678

Avira AntiVirus
TR/Dropper.Gen
7.11.152.214

avast!
Win32:Packed-C [Heur]
2014.9-150328

AVG
Win32/Heur
2016.0.3156

Bitdefender
Gen:Trojan.Heur.TP.ts0@bGwDLsjc
1.0.20.435

Bkav FE
HW32.TsCabk
1.3.0.4959

Comodo Security
UnclassifiedMalware
18424

Emsisoft Anti-Malware
Gen:Trojan.Heur.TP.ts0@bGwDLsjc
8.15.03.28.04

F-Secure
Gen:Trojan.Heur.TP.ts0@bGwDLsjc
11.2015-28-03_7

G Data
Gen:Trojan.Heur.TP.ts0@bGwDLsjc
15.3.24

IKARUS anti.virus
Virus.Win32.Heur
t3scan.1.6.1.0

Malwarebytes
Trojan.XBuild402
v2015.03.28.04

McAfee
Artemis!B6B5456246C0
5600.6812

MicroWorld eScan
Gen:Trojan.Heur.TP.ts0@bGwDLsjc
16.0.0.261

Norman
Suspicious_Gen.PNVM
11.20150328

Qihoo 360 Security
Win32/Trojan.e6d
1.0.0.1015

Total Defense
Win32/Turkojan.B!generic
37.0.10977

VIPRE Antivirus
Trojan.Win32.Generic
29902

File size:
2.3 MB (2,418,176 bytes)

Product version:
4.7

File PE Metadata
Compilation timestamp:
7/31/2019 2:58:37 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.42

CTPH (ssdeep):
49152:ouHKKZw3TiN3bnUYnQgDwbHAa9EKSSevH/:ouHbZaTwTDszEKDe

Entry address:
0x1000

Entry point:
F7, D9, 81, E9, 90, E2, 26, 3C, F7, E8, 09, C9, F9, 0F, 83, 5E, 8A, 7D, 0B, 11, D6, 31, C9, F3, A4, F9, 0F, 83, 81, BD, 26, 73, 31, C9, F3, AE, 19, F1, 81, CA, 87, 4F, 92, 5B, 85, F3, C1, EE, 62, 87, D1, 81, C6, 75, E6, 1B, 06, 4B, F9, 89, C9, 42, F7, D6, D5, 0A, F7, C2, FB, 53, 41, 0A, 31, F2, F7, E0, 25, 11, 8C, D7, 29, 66, 99, 39, C0, 29, D2, 81, FE, EA, AA, 87, 2D, 98, BB, E4, C0, 22, 03, 35, 58, 47, 5A, 58, 75, 00, A9, DE, 31, E2, 6D, 21, D3, 0D, 98, C3, 1A, 24, 01, D3, BB, 91, B1, 5F, 07, 0F, C9, 7F...
 
[+]

Code size:
2.5 KB (2,560 bytes)

Remove {b4de37df-ebec-49ec-8f6c-03694c9ecfdc} - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.