home

spxujlqpjpd.exe

dloadexec

The executable spxujlqpjpd.exe has been detected as malware by 23 anti-virus scanners. According to AVG, this software downloads additional adware offers during setup.
Product:
dloadexec

Version:
1.0.0.0

MD5:
78b6e1c3488d1c3da539dca686f4e625

SHA-1:
0ec5ba46a9dd4f64e5b3348012003b133cb9275f

SHA-256:
86f8e76242d1ab619e3ee99a3c1a70fd15a822d3dfa6cbc517cb62fe20f207c6

Scanner detections:
23 / 68

Status:
Malware

Analysis date:
4/25/2024 4:11:34 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.GenericKD.2611774
-41

Avira AntiVirus
TR/Dldr.Agent.6144.75
8.3.1.6

Arcabit
Trojan.Generic.D27DA3E
1.0.0.425

avast!
Win32:Malware-gen
2014.9-170316

AVG
Downloader.MSIL
2018.0.2437

Baidu Antivirus
Trojan.MSIL.Tiny
4.0.3.17316

Bitdefender
Trojan.GenericKD.2611774
1.0.20.375

Emsisoft Anti-Malware
Trojan.GenericKD.2611774
8.17.03.16.12

ESET NOD32
MSIL/TrojanDownloader.Tiny.LZ
11.12062

Fortinet FortiGate
MSIL/Tiny.LZ!tr.dldr
3/16/2017

F-Secure
Trojan.GenericKD.2611774
11.2017-16-03_5

G Data
Trojan.GenericKD.2611774
17.3.25

IKARUS anti.virus
Trojan-Downloader.MSIL.Tiny
t3scan.1.9.5.0

K7 AntiVirus
Trojan-Downloader
13.207.16825

Malwarebytes
Trojan.Downloader
v2017.03.16.12

Microsoft Security Essentials
Trojan:Win32/Skeeyah.A!bit
1.1.11903.0

MicroWorld eScan
Trojan.GenericKD.2611774
18.0.0.225

NANO AntiVirus
Trojan.Win32.Agent.dutwry
0.30.24.3079

nProtect
Trojan.GenericKD.2611774
15.08.07.01

Qihoo 360 Security
HEUR/QVM03.0.Malware.Gen
1.0.0.1015

Sophos
Mal/Generic-S
4.98

Trend Micro
TROJ_GEN.R072C0DH615
10.465.16

VIPRE Antivirus
Trojan.Win32.Generic
42704

File size:
6 KB (6,144 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2015

Original file name:
dloadexec.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\spxujlqpjpd.exe

File PE Metadata
Compilation timestamp:
7/25/2015 5:07:04 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
48.0

.NET CLR dependent:
Yes

Entry address:
0x2DDE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 02, 00, 10, 00, 00, 00, 20, 00, 00, 80, 18, 00, 00, 00, 50, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 01, 00, 00, 00, 38, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
3.5 KB (3,584 bytes)

Remove spxujlqpjpd.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.