home

de-de.exe

The executable de-de.exe has been detected as malware by 26 anti-virus scanners.
MD5:
fd2dc84ccd76a4d749ad2e7e1699ca3a

SHA-1:
82f96318a80c9799e4055ad4d3adfdc2b35becc8

SHA-256:
bbaf9e0beedc89b974b0d1209f1e982f10c06bf2a69e79a4580dc0d8e6a1d78b

Scanner detections:
26 / 68

Status:
Malware

Analysis date:
4/29/2024 10:03:47 AM UTC  (today)

Scan engine
Detection
Engine version

AhnLab V3 Security
Win32/Mabezat
17.03.14

Avira AntiVirus
Worm/Mabezat.b
17.03.14

avast!
Win32:Trojan-gen {Other}
2014.9-170314

AVG
Win32/Mabezat.A
2018.0.2440

Bitdefender
Win32.Worm.Mabezat.J
1.0.20.365

Clam AntiVirus
W32.Mabezat-2
0.98/18155

Dr.Web
Win32.HLLW.Tazebama
9.0.1.073

ESET NOD32
Win32/Mabezat
11.-

Fortinet FortiGate
W32/Mabezat.B
3/14/2017

F-Prot
W32/Mabezat.A
v6.-

F-Secure
Worm.Win32.Mabezat.b
11.2017-14-03_3

G Data
Win32.Worm.Mabezat
17.3.-

IKARUS anti.virus
Worm.Win32.Mabezat.b
17.03.14

K7 AntiVirus
Virus.Win32.Mabezat.b-3
13.-

Kaspersky
Worm.Win32.Mabezat
14.0.0.-1305

McAfee
W32/Mabezat
5600.6096

Microsoft Security Essentials
Virus:Win32/Mabezat.B
1.163.1557.0

Norman
Mabezat.B
11.20170314

Panda Antivirus
W32/Mabezat.C.worm
17.03.14.12

Prevx
Cloaked Malware
3.0.3

Quick Heal
W32.Mabezat.Dr
3.17.-

Rising Antivirus
Win32.Mabezat.b
23.00.65.17312

Sophos
W32/Mabezat-B
17.03.14

Trend Micro
PE_MABEZAT.B-O
10.465.14

Vba32 AntiVirus
Worm.Win32.Mabezat.b
17.03.14

ViRobot
Worm.Win32.Mabezat.154751
17.03.14

File size:
151.9 KB (155,561 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\js\nls\de-de\de-de.exe

File PE Metadata
Compilation timestamp:
10/29/2007 9:17:05 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x1000

Entry point:
53, 83, EC, 44, B8, 23, 10, 40, 00, B9, 00, 00, 00, 00, 8A, 18, 80, C3, C5, 88, 18, 83, C0, 01, 83, C1, 01, 81, F9, 37, D1, 00, 00, 75, EB, F3, 3B, 3B, 7C, 3B, F4, 3B, 3B, 3B, 3B, C5, 53, BB, FE, DF, C3, 53, BE, FC, 3C, BE, FB, 3C, BC, 34, 3A, 62, 3B, 3B, B0, 26, F3, 3B, 4B, 7B, 3B, F6, FE, FE, FE, FE, C4, 53, F3, 10, 15, 7B, 3B, BE, FB, 3B, BE, FF, 7F, 3A, 0B, FE, 96, FE, 23, 40, 3B, 3B, 3B, 24, 45, 3B, 3B, 3B, F4, 13, 62, 7C, 3B, 24, A6, F0, 3B, 3B, A3, B9, 4B, 7B, 3B, 23, 6A, 04, 3B, 3B, 94, FE, F4, 13...
 
[+]

Entropy:
7.0296

Code size:
52.5 KB (53,760 bytes)

Remove de-de.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.