data.exe
The executable data.exe has been detected as malware by 32 anti-virus scanners. According to the AV engines that detect this, it is a detection for a file infected by members of the Win32/Ramnit malware family and may drop and load other malware.
MD5:
faf2c72beb70c9a098c582f51cc2c928
SHA-1:
1235d8278ee61914b87b6f0c75d9a9a22017a927
SHA-256:
f7770898ae120de301d60e2a5ba253e90b215b1d01795eb233b8e937a3e9e55f
Scanner detections:
32 / 68
Status:
File is infected by a Virus
Explanation:
The file is infected by a polymorphic file infector virus.
Analysis date:
4/25/2024 11:06:34 PM UTC (a few moments ago)
Scan engine
Detection
Engine version
Lavasoft Ad-Aware
Gen:Trojan.Heur.wu1@rbm4nqbib
1017
Agnitum Outpost
Win32.Ramnit.Gen.2
7.1.1
AhnLab V3 Security
Worm/Win32.Sohaned
14.04.24
Avira AntiVirus
W32/Ramnit.C
7.11.145.18
avast!
AutoIt:AutoRun-B@BC [Wrm]
2014.9-140424
AVG
Worm/AutoRun
2015.0.3495
Bitdefender
Gen:Trojan.Heur.wu1@rbm4nqbib
1.0.20.570
Bkav FE
W32.HfsAutoA
1.3.0.4959
Comodo Security
Virus.Win32.Ramnit.K
18158
Dr.Web
Win32.HLLW.Autoruner1.54163
9.0.1.0114
Emsisoft Anti-Malware
Gen:Trojan.Heur.wu1@rbm4nqbib
8.14.04.24.05
Fortinet FortiGate
W32/Ramnit.A
4/24/2014
F-Prot
W32/Ramnit.E
v6.4.7.1.166
F-Secure
Gen:Trojan.Heur.wu1@rbm4nqbib
11.2014-24-04_5
G Data
Gen:Trojan.Heur.wu1@rbm4nqbib
14.4.24
IKARUS anti.virus
Worm.Win32.AutoIt
t3scan.1.6.1.0
K7 AntiVirus
Virus
13.176.11861
Malwarebytes
Worm.AutoRun.FLDGen
v2014.04.24.05
McAfee
W32/Ramnit.a
5600.7151
Microsoft Security Essentials
Worm:Win32/Nuqel.AR
1.10502
MicroWorld eScan
Gen:Trojan.Heur.wu1@rbm4nqbib
15.0.0.342
NANO AntiVirus
Virus.Win32.Nimnul.bmnup
0.28.0.59492
Norman
Suspicious.A
11.20140424
Panda Antivirus
Trj/Autoit.gen
14.04.24.05
Quick Heal
W32.Ramnit.D
4.14.12.00
Rising Antivirus
PE:Malware.FakeFolder@CV!1.6AA9
23.00.65.14422
SUPERAntiSpyware
Trojan.Agent/Gen-Nuqel
10647
Trend Micro House Call
PAK_Generic.006
7.2.114
Trend Micro
PAK_Generic.006
10.465.24
VIPRE Antivirus
Virus.Win32.Ramnit.a!dam
28562
ViRobot
Worm.Win32.AutoIt.267087
2011.4.7.4223
File size:
366.4 KB (375,162 bytes)
File type:
Executable application (Win32 EXE)
Language:
English (United Kingdom)
Common path:
C:\Program Files\realtek\rtl8187 wireless lan utility\data.exe
Compilation timestamp:
5/16/2008 10:33:14 AM
CTPH (ssdeep):
6144:3YZTNk3D6LyUXwLLk+cR3qh0GQ43VJRD0ew+/UO7BDB99KU1DmRZ9EBVLX64HBf:3SNC80I+cR3R03VseuOtV99z1DmClXhx
Entropy:
7.8181 (probably packed)
Code size:
224 KB (229,376 bytes)