home

eb70setup.exe

SpectorSoft Corp.

The executable eb70setup.exe has been detected as malware by 8 anti-virus scanners. This is a setup and installation application and has been known to bundle potentially unwanted software.
Publisher:
SpectorSoft Corp.  (signed and verified)

MD5:
a0c939393c6a1ad5c7965b5ac1a1d987

SHA-1:
aff0687a86460b82f71588f035579b7b1861f9c5

SHA-256:
529d32a3fac13eae8020e8db72faeeba188e060881081225bd1ace251634e597

Scanner detections:
8 / 68

Status:
Malware

Analysis date:
4/26/2024 4:19:42 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.Laneul
1.3.0.4246

Dr.Web
Trojan.Sender.origin
9.0.1.0189

ESET NOD32
Win32/TrojanDropper.Agent.QAR
8.8816

Fortinet FortiGate
Riskware/EBlaster
7/8/2014

McAfee
Spyware-eBlaster
5600.7075

NANO AntiVirus
Trojan.Win32.EBlaster.bxpruw
0.26.0.54818

Trend Micro House Call
TROJ_GEN.RCBH1B5
7.2.189

VIPRE Antivirus
eBlaster
21592

File size:
6.7 MB (7,075,304 bytes)

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
SpectorSoft Corp.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
5/11/2010 8:00:00 PM

Valid to:
6/14/2012 7:59:59 PM

Subject:
CN=SpectorSoft Corp., OU=SECURE APPLICATION DEVELOPMENT, O=SpectorSoft Corp., L=Vero Beach, S=Florida, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
061D0A31B6990BF1322A8522312EF54C

File PE Metadata
Compilation timestamp:
11/12/2010 9:59:53 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
196608:6vyRxjOKqV/+ItIQLqgYC8oIAqBvqS/5Z3xjKPYExYn:KW5gNbqi8/Bl/1jKPY7n

Entry address:
0x9173

Entry point:
E8, AE, 39, 00, 00, E9, 16, FE, FF, FF, CC, CC, CC, 55, 8B, EC, 57, 56, 8B, 75, 0C, 8B, 4D, 10, 8B, 7D, 08, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, A4, 01, 00, 00, 81, F9, 00, 01, 00, 00, 72, 1F, 83, 3D, 1C, F2, 41, 00, 00, 74, 16, 57, 56, 83, E7, 0F, 83, E6, 0F, 3B, FE, 5E, 5F, 75, 08, 5E, 5F, 5D, E9, 65, 1C, 00, 00, F7, C7, 03, 00, 00, 00, 75, 15, C1, E9, 02, 83, E2, 03, 83, F9, 08, 72, 2A, F3, A5, FF, 24, 95, F4, 92, 40, 00, 90, 8B, C7, BA, 03, 00, 00, 00, 83, E9, 04, 72, 0C, 83, E0, 03...
 
[+]

Entropy:
7.9958  (probably packed)

Code size:
80 KB (81,920 bytes)

Remove eb70setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.