home

finject.exe

The executable finject.exe has been detected as malware by 32 anti-virus scanners.
MD5:
3647c4e702919f9ad0a2532303a7d56e

SHA-1:
53454f3b16346a1eda21644076a802fd5c8ed69b

SHA-256:
44120c637731c16e0d78a1f2679799caa38818f778189c7a6257da629b538b53

Scanner detections:
32 / 68

Status:
Malware

Analysis date:
4/26/2024 12:00:04 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Generic.KDV.64849
926

Agnitum Outpost
Trojan.Swisyn
7.1.1

Avira AntiVirus
TR/Swisyn.aiwd.1
7.11.158.124

AVG
HackTool
2015.0.3404

Baidu Antivirus
Hacktool.Win32.Inject
4.0.3.14723

Bitdefender
Trojan.Generic.KDV.64849
1.0.20.1020

Bkav FE
W32.Clod36d.Trojan
1.3.0.4959

Comodo Security
TrojWare.Win32.UMal.~A
18764

Emsisoft Anti-Malware
Trojan.Generic.KDV.64849
8.14.07.23.12

ESET NOD32
Win32/HackTool.Inject (variant)
8.10045

Fortinet FortiGate
W32/Swisyn.65E9!tr
7/23/2014

F-Prot
W32/MalwareF.HQLA
v6.4.7.1.166

F-Secure
Trojan.Generic.KDV.64849
11.2014-23-07_4

G Data
Trojan.Generic.KDV.64849
14.7.24

IKARUS anti.virus
HackTool.Win32.Agent
t3scan.1.6.1.0

Kaspersky
HackTool.Win32.Agent
14.0.0.3517

Malwarebytes
PUP.HackTool.H
v2014.07.23.12

McAfee
Artemis!3647C4E70291
5600.7060

MicroWorld eScan
Trojan.Generic.KDV.64849
15.0.0.612

NANO AntiVirus
Trojan.Win32.Agent.bockny
0.28.0.60577

Norman
Suspicious_Gen2.IHMIV
11.20140723

nProtect
Trojan/W32.Swisyn.3034624
14.07.04.01

Panda Antivirus
Trj/CI.A
14.07.23.12

Qihoo 360 Security
Win32/Trojan.41b
1.0.0.1015

Quick Heal
HackTool.Agent.dte (Not a Virus)
7.14.14.00

Sophos
Generic PUA FD
4.98

Trend Micro House Call
TROJ_SPNR.0BJ213
7.2.204

Trend Micro
TROJ_SPNR.0BJ213
10.465.23

Vba32 AntiVirus
Trojan.Swisyn
3.12.26.3

VIPRE Antivirus
Trojan.Win32.Generic
30952

ViRobot
Trojan.Win32.S.Black.3034624
2011.4.7.4223

Zillya! Antivirus
Trojan.Swisyn.Win32.9489
2.0.0.1845

File size:
2.9 MB (3,034,624 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
12/12/2009 5:04:22 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
24576:1hZ+4dwJD7PRDuOsst3mkGOJO7l9wf3xnSOvVA7fG2TpxBB:IMaA7li1K7fDT3

Entry address:
0x1480

Entry point:
EB, 10, 66, 62, 3A, 43, 2B, 2B, 48, 4F, 4F, 4B, 90, E9, 9C, A0, 4D, 00, A1, 8F, A0, 4D, 00, C1, E0, 02, A3, 93, A0, 4D, 00, 52, 6A, 00, E8, B9, 7F, 0D, 00, 8B, D0, E8, 0E, 41, 0B, 00, 5A, E8, 24, 3D, 0B, 00, E8, EF, 45, 0B, 00, 6A, 00, E8, BC, 56, 0B, 00, 59, 68, 38, A0, 4D, 00, 6A, 00, E8, 93, 7F, 0D, 00, A3, 97, A0, 4D, 00, 6A, 00, E9, 7F, DC, 0B, 00, E9, EE, 56, 0B, 00, 33, C0, A0, 81, A0, 4D, 00, C3, A1, 97, A0, 4D, 00, C3, 60, BB, 00, 50, B0, BC, 53, 68, AD, 0B, 00, 00, C3, B9, EC, 00, 00, 00, 0B, C9...
 
[+]

Entropy:
4.1427

Code size:
868 KB (888,832 bytes)

Remove finject.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.