home

kb00400548.exe

Durcheilender6

DotFix Software

The executable kb00400548.exe has been detected as malware by 22 anti-virus scanners.
Publisher:
DotFix Software  (signed and verified)

Product:
Durcheilender6

Description:
belauft

Version:
4.01.0003

MD5:
cc70e267f776410944651661f4152b46

SHA-1:
2b24d281a099087a90ef69b393a73b38b1cd163d

SHA-256:
00b965f3130e972d6ff04b219b368f274debc2ed615eb0179999f55953f7d0f1

Scanner detections:
22 / 68

Status:
Malware

Analysis date:
4/25/2024 10:06:24 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.GenericKD.1998228
59

Avira AntiVirus
TR/Rogue.863112
7.11.197.26

avast!
Win32:Dropper-gen [Drp]
2014.9-161206

AVG
Inject2
2017.0.2537

Baidu Antivirus
Trojan.Win32.Injector
4.0.3.16126

Bitdefender
Trojan.GenericKD.1998228
1.0.20.1705

Emsisoft Anti-Malware
Trojan.GenericKD.1998228
8.16.12.06.12

ESET NOD32
Win32/Injector.BQQD (variant)
10.10911

Fortinet FortiGate
W32/BQGY!tr
12/6/2016

F-Secure
Trojan.GenericKD.1998228
11.2016-06-12_3

G Data
Trojan.GenericKD.1998228
16.12.24

IKARUS anti.virus
Trojan.Win32.Injector
t3scan.1.8.5.0

K7 AntiVirus
Trojan
13.188.14395

Kaspersky
UDS:DangerousObject.Multi.Generic
14.0.0.-818

McAfee
Artemis!CC70E267F776
5600.6193

MicroWorld eScan
Trojan.GenericKD.1998228
17.0.0.1023

nProtect
Trojan.GenericKD.1998228
14.12.19.01

Panda Antivirus
Generic Suspicious
16.12.06.12

Rising Antivirus
PE:Trojan.Win32.Generic.17C79332!398955314
23.00.65.161204

Sophos
Mal/Generic-S
4.98

Trend Micro House Call
TROJ_GEN.R08NH09KT14
7.2.341

VIPRE Antivirus
Trojan.Win32.Generic
35952

File size:
842.9 KB (863,112 bytes)

Product version:
4.01.0003

Copyright:
Nachwuchsforschungspreisen0

Trademarks:
Auswahlchor5

Original file name:
Carbon.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\kb00400548.exe

Digital Signature
Signed by:
DotFix Software

Authority:
COMODO CA Limited

Valid from:
7/15/2012 2:00:00 AM

Valid to:
7/16/2013 1:59:59 AM

Subject:
CN=DotFix Software, O=DotFix Software, STREET=Nekrasova str. 7, L=Tula, S=Tulskaya obl., PostalCode=300045, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00F3976D4C7DBBEE87A0D211C51894BA32

File PE Metadata
Compilation timestamp:
11/27/2014 11:13:19 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:q/ksQ6nYHXoeLZcxEy+Ki+mCDjwtHkPDy6bv/8H8t+/sia:q/NWlc2y+KHPwNkt78H8f

Entry address:
0x1240

Entry point:
68, AC, 2F, 4C, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 48, 00, 00, 00, 00, 00, 00, 00, D0, 3F, F3, 96, 19, CC, C5, 45, 81, 05, 7C, 88, DE, 9A, 27, 58, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, D0, EF, E6, 02, 42, 75, 6E, 64, 65, 73, 67, 65, 77, 65, 72, 6B, 73, 63, 68, 61, 66, 74, 73, 74, 61, 67, 33, 00, 00, 00, 00, 00, FF, CC, 31, 00, 0F, 5D, 66, 53, 3D, F1, 5B, 8A, 4B, A0, 15, 26, 17, 00, F3, 97, 5E, 65, 17, F1, 9C, 18, 98, 9B, 41, 86, 9C, F2, C2, E9, 88, 73, 28, 3A, 4F, AD...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
824 KB (843,776 bytes)

Remove kb00400548.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.