home

o7passshowa11.exe

The application o7passshowa11.exe has been detected as a potentially unwanted program by 18 anti-malware scanners. It runs as a scheduled task under the Windows Task Scheduler triggered daily at a specified time.
MD5:
9c81136dda57993d495e0bb713535fd3

SHA-1:
1501dc2d4656b47d4b3340fc1edd52b2a7179ac1

SHA-256:
259e417198762477afab278193dc78c6cda9d99d64b8cef6a1fb0e1aef0f9ad0

Scanner detections:
18 / 68

Status:
Potentially unwanted

Analysis date:
4/26/2024 3:40:56 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Application.Generic.1135280
707

Avira AntiVirus
Adware/AddLyrics.519680.2
7.11.209.28

avast!
Win32:Adware-gen [Adw]
2014.9-150227

AVG
AddLyrics_r
2016.0.3185

Baidu Antivirus
Adware.Win32.AddLyrics
4.0.3.15227

Bitdefender
Application.Generic.1135280
1.0.20.290

ESET NOD32
Win32/Adware.AddLyrics.DQ (variant)
9.11147

Fortinet FortiGate
Riskware/AddLyrics
2/27/2015

F-Prot
W32/S-c70626d2
v6.4.7.1.166

F-Secure
Application.Generic.1135280
11.2015-27-02_6

G Data
Application.Generic.1135280
15.2.25

K7 AntiVirus
Adware
13.194.14904

McAfee
Artemis!9C81136DDA57
5600.6841

MicroWorld eScan
Application.Generic.1135280
16.0.0.174

Panda Antivirus
Generic Suspicious
15.02.27.11

Sophos
Generic PUA BF
4.98

Trend Micro House Call
Suspicious_GEN.F47V0202
7.2.58

VIPRE Antivirus
Trojan.Win32.Generic
37390

File size:
507.5 KB (519,680 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\ver3passshow\o7passshowa11.exe

File PE Metadata
Compilation timestamp:
1/29/2015 9:37:58 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:UxTSk16nsSo9ToYef0M8Sau9rPWoUIp7LErQq7LdKI:cTSkvPmYJM83u9rPW47LErQq7LdKI

Entry address:
0x3CCF0

Entry point:
E8, B0, 94, 00, 00, E9, 7F, FE, FF, FF, 6A, 14, 68, F0, CD, 45, 00, E8, 4A, 26, 00, 00, 8B, 75, 08, 8B, DE, 89, 75, E4, 85, F6, 75, 19, 39, 75, 0C, 74, 14, E8, 5C, 04, 00, 00, C7, 00, 16, 00, 00, 00, E8, E2, 03, 00, 00, 33, C0, EB, 77, 33, C0, 39, 45, 0C, 0F, 9D, C0, 85, C0, 74, E0, 33, C0, 8B, 7D, 10, 85, FF, 0F, 95, C0, 85, C0, 74, D2, 83, 7D, 0C, 00, 74, DC, 89, 7D, 08, 57, E8, 29, 61, 00, 00, 59, 83, 65, FC, 00, 85, F6, 74, 37, FF, 4D, 0C, 74, 2D, 57, E8, 7F, 95, 00, 00, 59, 0F, B7, C0, 89, 45, E0, 3D...
 
[+]

Entropy:
6.3034

Code size:
319.5 KB (327,168 bytes)

Scheduled Task
Task name:
PassShow Update

Trigger:
Daily (Runs daily at 10:38 p.m.)


Remove o7passshowa11.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.