home

pro facebook account hack v2.0.exe

The executable pro facebook account hack v2.0.exe has been detected as malware by 20 anti-virus scanners. This backdoor trojan may be used to conduct distributed denial of service attacks, or used to install additional trojans or other forms of malicious software as well as can steal your sensitive information.
Version:
0.0.0.0

MD5:
bd299218882f7145fd7bf2686f5546cc

SHA-1:
31d6a26cb7a69240718d07a76cfef49f9eb1db3c

SHA-256:
faef9742715aa954699de9bc6e0b19d9df31fd7e4705cce95a7ad2538f9a445b

Scanner detections:
20 / 68

Status:
Malware

Analysis date:
4/20/2024 1:36:43 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Dropper.MSIL.Gen
7.11.158.184

AVG
Dropper.Generic8
2015.0.3374

Baidu Antivirus
Trojan.MSIL.Disfa
4.0.3.14822

Comodo Security
UnclassifiedMalware
18794

Dr.Web
Win32.HLLW.Autoruner.25074
9.0.1.0234

Emsisoft Anti-Malware
Gen:Variant.Barys.17071
8.14.08.22.09

ESET NOD32
MSIL/Kryptik.MB (variant)
8.10056

Fortinet FortiGate
MSIL/Injector.PE!tr
8/22/2014

F-Secure
Gen:Variant.Barys.17071
11.2014-22-08_6

IKARUS anti.virus
Trojan.MSIL2
t3scan.1.6.1.0

K7 AntiVirus
Riskware
13.180.12626

Malwarebytes
Trojan.MSIL
v2014.08.22.09

Microsoft Security Essentials
Backdoor:MSIL/Bladabindi.AA
1.10701

MicroWorld eScan
Gen:Variant.Barys.17071
15.0.0.702

NANO AntiVirus
Trojan.Win32.Kryptik.cedvvk
0.28.0.60577

Panda Antivirus
Generic Malware
14.08.22.09

Qihoo 360 Security
Win32/Trojan.997
1.0.0.1015

Quick Heal
Trojan.MSIL.r3
8.14.14.00

Trend Micro House Call
TROJ_SPNR.28K613
7.2.234

VIPRE Antivirus
Trojan.Win32.Generic
31048

File size:
664 KB (679,936 bytes)

Product version:
0.0.0.0

Original file name:
3eippjli.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\vmwarednd\9532f8d2\pro facebook account hack v2.0\pro facebook account hack v2.0.exe

File PE Metadata
Compilation timestamp:
8/29/2013 5:18:49 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:kt3x5Ovfv3eUpG8J+SSaT5pxJ1xHVNoYJHc3Ln+p:kH5s3fppSabrvViYJH+Ln+

Entry address:
0x9C2D1

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.8313

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
620 KB (634,880 bytes)

Remove pro facebook account hack v2.0.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.