home

hack de crosfire.exe

Gerenciador de Audio

The executable hack de crosfire.exe has been detected as malware by 15 anti-virus scanners. The file has been seen being downloaded from fs09n3.sendspace.com and multiple other hosts.
Product:
Gerenciador de Audio

Version:
1.0.0.0

MD5:
440bf86f2c36e59100acf30e5f594cc8

SHA-1:
aede917b529656d26f23beb82bb31ed42de29c23

SHA-256:
086b52467d2b2729024d85b67f2cfa32ac39b657eb97bbe9dffbb0326e0b1125

Scanner detections:
15 / 68

Status:
Malware

Analysis date:
4/24/2024 11:37:18 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Kazy.715429
178

AegisLab AV Signature
Troj.W32.Gen.lZj2
2.1.4+

Avira AntiVirus
TR/Dropper.Gen
8.3.3.4

Arcabit
Trojan.Kazy.DAEAA5
1.0.0.742

avast!
Win32:Evo-gen [Susp]
2014.9-160809

Baidu Antivirus
Win32.Trojan.WisdomEyes.151026.9950
4.0.3.1689

Bitdefender
Gen:Variant.Kazy.715429
1.0.20.1110

Emsisoft Anti-Malware
Gen:Variant.Kazy.715429
8.16.08.09.12

ESET NOD32
MSIL/Packed.Confuser.P suspicious (variant)
10.13930

F-Secure
Gen:Variant.Kazy.715429
11.2016-09-08_3

G Data
Gen:Variant.Kazy.715429
16.8.25

IKARUS anti.virus
Trojan.MSIL.Crypt
t3scan.2.1.6.0

Kaspersky
HEUR:Trojan.Win32.Generic
14.0.0.-223

MicroWorld eScan
Gen:Variant.Kazy.715429
17.0.0.666

Qihoo 360 Security
HEUR/QVM03.0.0000.Malware.Gen
1.0.0.1120

File size:
108.8 KB (111,391 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2016

Original file name:
Gerenciador de Audio.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\hack de crosfire.exe

File PE Metadata
Compilation timestamp:
8/7/2016 4:39:38 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:CD2rmzQbU8jL8zcoBoH7dBhQVpH20NW3/EflflK:Ecmwf7H7ThIW0EkRg

Entry address:
0x1669E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.1944

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
82 KB (83,968 bytes)

The file hack de crosfire.exe has been seen being distributed by the following 2 URLs.

https://fs09n3.sendspace.com/dl/a99a19d31c01e94bb90cc2d0104dafb0/57b47a6a72386842/.../Hack de Crosfire.exe

https://fs09n3.sendspace.com/dl/bfeb7c8f43f05b13ba628aa4c1404425/57a9cf2b56446ce6/.../Hack de Crosfire.exe

Remove hack de crosfire.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.