home

offset locator.exe

Proyecto1

The executable offset locator.exe has been detected as malware by 33 anti-virus scanners.
Product:
Proyecto1

Version:
1.00

MD5:
2b376ecac5291594146024fa417a2da6

SHA-1:
e29d6fa9429eff5220bbb746c894eac6106fadfe

SHA-256:
0b3ed11a258014dd55db594a7d517b0344d027d7adb0b5ad9e800ae2c99014e8

Scanner detections:
33 / 68

Status:
Malware

Analysis date:
4/26/2024 4:10:59 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Generic.5344971
800

Agnitum Outpost
Packed/NSPack
7.1.1

Avira AntiVirus
HEUR/Crypted
7.11.127.214

AVG
Generic20
2015.0.3278

Baidu Antivirus
HackTool.Win32.Agent
4.0.3.141126

Bitdefender
Trojan.Generic.5344971
1.0.20.1650

Comodo Security
TrojWare.Win32.Trojan.NSPM.~gen
17694

Dr.Web
Trojan.VbCrypt.250
9.0.1.0330

Emsisoft Anti-Malware
Trojan.Generic.5344971
8.14.11.26.01

Fortinet FortiGate
W32/Dx.YAN!tr
11/26/2014

F-Prot
W32/VisualBasicMalware
v6.4.7.1.166

F-Secure
Trojan.Generic.5344971
11.2014-26-11_4

G Data
Trojan.Generic.5344971
14.11.24

IKARUS anti.virus
Trojan-Spy.Win32.Zbot
t3scan.2.2.29

K7 AntiVirus
Trojan
13.175.11003

Kaspersky
HackTool.Win32.Agent
14.0.0.2887

Malwarebytes
Backdoor.Agent
v2014.11.26.01

McAfee
Trojan-FDLC!2B376ECAC529
5600.6934

Microsoft Security Essentials
VirTool:Win32/VBInject.UN
1.165.247.01

MicroWorld eScan
Trojan.Generic.5344971
15.0.0.990

NANO AntiVirus
Trojan.Win32.Agent2.cnwspl
0.28.0.57473

Norman
Suspicious_N.gen
11.20141126

nProtect
Trojan/W32.Agent.17106
14.01.29.01

Panda Antivirus
Generic Trojan
14.11.26.01

Qihoo 360 Security
Win32/Trojan.Hacktool.e34
1.0.0.1015

Quick Heal
HackTool.Agent.anj (Not a Virus)
11.14.12.00

Rising Antivirus
PE:Trojan.Win32.Generic.129414B0!311694512
23.00.65.141124

Sophos
Mal/EncPk-UY
4.97

SUPERAntiSpyware
Trojan.Agent/Gen-Skelten[Ex]
10214

Trend Micro House Call
TROJ_GEN.R02BC0EHV13
7.2.330

Trend Micro
TROJ_GEN.R02BC0EHV13
10.465.26

Vba32 AntiVirus
Trojan.VB.Fakundo
3.12.24.3

VIPRE Antivirus
Packer.NSAnti.Gen
25930

File size:
16.7 KB (17,106 bytes)

Product version:
1.00

Original file name:
V2009V.exe

File type:
Executable application (Win32 EXE)

Language:
Spanish

Common path:
C:\users\{user}\downloads\programs\offset locator.exe

File PE Metadata
Compilation timestamp:
12/21/2008 2:59:55 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
384:bCZ1D8m2vDlOxVmnRhHSKKYSLqqeB6qXvGlzrUoaku8:ej8m2MUnXyZBeB6cU1aK

Entry address:
0xF8C2

Entry point:
9C, 60, E8, 00, 00, 00, 00, 5D, 83, ED, 07, 8D, 8D, E2, FE, FF, FF, 80, 39, 01, 0F, 84, 42, 02, 00, 00, C6, 01, 01, 8B, C5, 2B, 85, 76, FE, FF, FF, 89, 85, 76, FE, FF, FF, 01, 85, A6, FE, FF, FF, 8D, B5, EA, FE, FF, FF, 01, 06, 55, 56, 6A, 40, 68, 00, 10, 00, 00, 68, 00, 10, 00, 00, 6A, 00, FF, 95, 1E, FF, FF, FF, 85, C0, 0F, 84, 69, 03, 00, 00, 89, 85, 9E, FE, FF, FF, E8, 00, 00, 00, 00, 5B, B9, 67, 03, 00, 00, 03, D9, 50, 53, E8, B0, 02, 00, 00, 5E, 5D, 8B, 36, 8B, FD, 03, BD, 66, FE, FF, FF, 8B, DF, 83...
 
[+]

Packer / compiler:
NsPacK V3.7

Remove offset locator.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.