home

radb197d.tmp.exe

Headquartering

The executable radb197d.tmp.exe has been detected as malware by 22 anti-virus scanners.
Publisher:
Headquartering

Description:
Chambermaids

Version:
11.70.40.194

MD5:
193bac432c4615aebbc3661d30bbb04a

SHA-1:
a9223d67d729728d23185cf13ccfad004585b68f

SHA-256:
b86443235daf2e08cde0379c039a92090b36dd62cf1d86776a3ba88c1f72957e

Scanner detections:
22 / 68

Status:
Malware

Analysis date:
2/7/2026 4:41:28 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Graftor.315350
-39

Avira AntiVirus
TR/Crypt.ZPACK.towlx
8.3.3.4

Arcabit
Trojan.Graftor.D4CFD6
1.0.0.792

avast!
Win32:Trojan-gen
2014.9-170315

AVG
Generic38
2018.0.2439

Baidu Antivirus
Win32.Trojan.WisdomEyes.16070401.9500
4.0.3.17315

Bitdefender
Gen:Variant.Graftor.315350
1.0.20.370

Dr.Web
Trojan.Encoder.3976
9.0.1.074

Emsisoft Anti-Malware
Gen:Variant.Graftor.315350
8.17.03.15.09

ESET NOD32
Win32/Kryptik.FKYU (variant)
11.14644

Fortinet FortiGate
W32/Kryptik.FKYU!tr
3/15/2017

F-Secure
Gen:Variant.Graftor.315350
11.2017-15-03_4

G Data
Gen:Variant.Graftor.315350
17.3.25

Malwarebytes
Trojan.Dropper
v2017.03.15.09

MicroWorld eScan
Gen:Variant.Graftor.315350
18.0.0.222

NANO AntiVirus
Trojan.Win32.Kryptik.ejveqe
1.0.70.14200

Panda Antivirus
Trj/GdSda.A
17.03.15.09

Qihoo 360 Security
HEUR/QVM05.1.0000.Malware.Gen
1.0.0.1120

Rising Antivirus
Malware.Generic!kid6LlHK19I@4 (thunder)
23.00.65.17313

Sophos
Mal/Generic-S
4.98

Total Defense
Win32/Inject.C!generic
37.1.62.1

VIPRE Antivirus
Trojan.Win32.Generic
54652

File size:
84 KB (86,016 bytes)

Copyright:
Deteriorating Winterizing

Trademarks:
Unction Actualizes

Original file name:
Nonpolitical Expenditures

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\radb197d.tmp.exe

File PE Metadata
Compilation timestamp:
12/3/2016 7:01:32 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.50

Entry address:
0x1000

Entry point:
68, 54, 00, 00, 00, 68, 00, 00, 00, 00, 68, 24, 6B, 41, 00, E8, EC, 0F, 01, 00, 83, C4, 0C, 68, 00, 00, 00, 00, E8, E5, 0F, 01, 00, A3, 28, 6B, 41, 00, 68, 00, 00, 00, 00, 68, 00, 10, 00, 00, 68, 00, 00, 00, 00, E8, D2, 0F, 01, 00, A3, 24, 6B, 41, 00, E8, 3C, 11, 01, 00, E8, F7, 10, 01, 00, E8, 55, 10, 01, 00, BD, 7A, 26, 40, 00, 89, 2D, 70, 6B, 41, 00, BD, 97, 26, 40, 00, 89, EB, BD, 7A, 26, 40, 00, 29, EB, 89, 1D, 44, 6B, 41, 00, BD, 5B, 68, 41, 00, 89, EB, BD, 00, 62, 41, 00, 29, EB, 89, 1D, 30, 6B, 41...
 
[+]

Packer / compiler:
PKLITE32, 0x1.1

Code size:
66.5 KB (68,096 bytes)

Remove radb197d.tmp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.