home

eaflkmaf.exe

WindowsApplication1

The executable eaflkmaf.exe has been detected as malware by 23 anti-virus scanners.
Product:
WindowsApplication1

Version:
1.0.0.0

MD5:
e7d864f688a0338d30cc4668543ba544

SHA-1:
e08195ac22e7358d88d72e672b75076fef3aa103

SHA-256:
efb704224578c33c25cbbbbddc5dfc706ad8076a12160ff3feea4608a71f5139

Scanner detections:
23 / 68

Status:
Malware

Analysis date:
4/19/2024 6:54:12 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Kazy.624621
583

Agnitum Outpost
Trojan.PWS.OnLineGames
7.1.1

Avira AntiVirus
TR/Spy.Agent.NFX.708
8.3.1.6

Arcabit
Trojan.Kazy.D987ED
1.0.0.425

avast!
Win32:Malware-gen
2014.9-150701

AVG
PSW.MSIL
2016.0.3061

Baidu Antivirus
Trojan.MSIL.OnLineGames
4.0.3.1571

Bitdefender
Gen:Variant.Kazy.624621
1.0.20.910

Comodo Security
UnclassifiedMalware
22638

Dr.Web
Trojan.PWS.Gamania.43445
9.0.1.0182

Emsisoft Anti-Malware
Gen:Variant.Kazy.624621
8.15.07.01.09

ESET NOD32
MSIL/PSW.OnLineGames.PV (variant)
9.11874

Fortinet FortiGate
MSIL/Agent.NFX!tr.pws
7/1/2015

F-Secure
Gen:Variant.Kazy.624621
11.2015-01-07_4

G Data
Gen:Variant.Kazy.624621
15.7.25

Kaspersky
UDS:DangerousObject.Multi.Generic
14.0.0.1800

Malwarebytes
Trojan.MSIL
v2015.07.01.09

McAfee
Artemis!E7D864F688A0
5600.6717

MicroWorld eScan
Gen:Variant.Kazy.624621
16.0.0.546

NANO AntiVirus
Trojan.Win32.Gamania.cwrukm
0.30.24.2320

Qihoo 360 Security
HEUR/QVM03.0.Malware.Gen
1.0.0.1015

Rising Antivirus
PE:Trojan.Win32.Generic.162ACEE7!371904231
23.00.65.15629

VIPRE Antivirus
Trojan.Win32.Generic
41624

File size:
245.5 KB (251,392 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2013

Original file name:
RPHax.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
12/4/2013 10:41:33 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:wNxz6SkphAmiJpiz6zL2Mb6SkphAmiJpiz6:wNCpesz6/DUpesz6

Entry address:
0x261DE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 8D, A1, 9F, 52, 00, 00, 00, 00, 02, 00, 00, 00, 72, 00, 00, 00, 1C, 80, 02, 00, 1C, 46, 02, 00, 52, 53, 44, 53, E0, A7, CA, 6D, E8, 5A, 34, 44, A1, BF, 0C, 9C, E5, E5, 72, E0, 01, 00, 00, 00, 43, 3A, 5C, 44, 6F, 63, 75, 6D, 65, 6E, 74, 73, 20, 61, 6E, 64, 20, 53, 65, 74, 74, 69, 6E, 67, 73, 5C, 4B, 41, 52, 4C, 4F, 26, 41, 4E, 41, 5C, 44, 65, 73, 6B, 74, 6F...
 
[+]

Entropy:
6.7917

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
144.5 KB (147,968 bytes)

Remove eaflkmaf.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.