home

lordpe.exe

The executable lordpe.exe has been detected as malware by 18 anti-virus scanners.
MD5:
262ac6fab31c6ee6daaa11436fafcf7a

SHA-1:
fde9efda6b07523967e58b2194aa00e425d983f0

SHA-256:
c440882dee34c2ae5e4b6583ce65d7029061b139a375c674f5bde32a76a25747

Scanner detections:
18 / 68

Status:
Malware

Analysis date:
4/26/2024 4:50:33 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Trojan.DL.Agent
7.1.1

Avira AntiVirus
TR/Dldr.Agent.204288.2
7.11.209.48

AVG
Win32/Heri
2016.0.3141

Clam AntiVirus
Win.Trojan.Agent-131328
0.98/18355

Comodo Security
UnclassifiedMalware
17495

F-Prot
W32/Trojan2.MCJP
v6.4.7.1.166

IKARUS anti.virus
Virus.Win32.Heri
t3scan.1.8.6.0

K7 AntiVirus
Trojan
13.174.10623

McAfee
Artemis!262AC6FAB31C
5600.7150

Norman
Suspicious_Gen4.ECDQI
11.20140424

nProtect
Trojan/W32.Agent.208896.S
13.12.24.01

Reason Heuristics
Threat.Win.Reputation.IMP
15.4.13.1

Rising Antivirus
PE:Trojan.Win32.Generic.15369323!355898147
23.00.65.15411

Trend Micro House Call
TROJ_SPNV.03JK13
7.2.103

Trend Micro
TROJ_SPNV.03JK13
10.465.13

VIPRE Antivirus
Trojan.Win32.Generic
24728

ViRobot
Win32.Virut.AM
2011.4.7.4223

Zillya! Antivirus
Trojan.Agent.Win32.73322
2.0.0.2061

File size:
204 KB (208,896 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
8/13/2002 11:26:43 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:L2ssD59xVlcRRrg4dR5NHqJf9bWDrS1pE23hhjXnYJpqy3W:KhgRlrPabT1thjXnY

Entry address:
0x4340

Entry point:
51, 56, 6A, 00, FF, 15, 60, 91, 41, 00, A3, 5C, E7, 41, 00, E8, BC, 00, 00, 00, 8B, 35, D8, 90, 41, 00, 85, C0, 75, 04, 6A, FF, FF, D6, 8D, 44, 24, 04, 50, E8, C4, 01, 00, 00, 8B, 44, 24, 08, 83, C4, 04, 85, C0, 74, 18, 8B, 0D, 5C, E7, 41, 00, 6A, 00, 68, D0, 47, 40, 00, 6A, 00, 6A, 65, 51, FF, 15, 54, 92, 41, 00, E8, 5C, 3F, 00, 00, 6A, 00, FF, D6, 5E, 59, C3, 90, 90, 90, 90, 90, 8B, 44, 24, 08, 8B, 4C, 24, 04, 6A, 10, 68, B8, BC, 41, 00, 50, 51, FF, 15, C4, 92, 41, 00, C3, 90, 90, 90, 90, 90, 90, 90, 90...
 
[+]

Entropy:
6.4980

Code size:
93 KB (95,232 bytes)

Remove lordpe.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.