home

test.exe

The executable test.exe has been detected as malware by 78 anti-virus scanners.
MD5:
0f17f8371d7743d0bba7cfa600a77b7f

SHA-1:
cc18fe119157e5d822da5a8eac9eac35cc821abb

SHA-256:
1134a6dea3c060e6036dd1d8967cfacacf5cddb7509423fcf277185d142a36ca

Scanner detections:
68 / 68

Status:
Malware

Analysis date:
5/15/2024 12:21:18 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Agent.AROC
654

Agnitum Outpost
Worm.DR.Rebhip.Gen
7.1.1

AhnLab V3 Security
Trojan/Win32.Llac
15.04.22

Avira AntiVirus
Worm/Rebhip.A.9877
7.11.30.172

avast!
Win32:Rebhip-AS [Trj]
2014.9-150422

AVG
PSW.Delf.3.E
2016.0.3132

Baidu Antivirus
Trojan.Win32.Llac
4.0.3.15422

Bitdefender
Trojan.Agent.AROC
1.0.20.560

Bkav FE
W32.Clod015.Trojan
1.3.0.4959

Clam AntiVirus
Trojan.Agent-192978
0.98/18355

Comodo Security
Worm.Win32.AutoRun.BDZ
18047

Dr.Web
Win32.HLLW.Autoruner.25074
9.0.1.0112

Emsisoft Anti-Malware
Trojan.Agent.AROC
8.15.04.22.03

ESET NOD32
Win32/Spatet
9.9637

Fortinet FortiGate
W32/Spatet.TRR!tr
4/22/2015

F-Prot
W32/Rebhip.A.gen
v6.4.6.5.141

F-Secure
Trojan.Agent.AROC
11.2015-22-04_4

G Data
Trojan.Agent.AROC
15.4.24

herdProtect (fuzzy)
variant of server.exe
2015.7.23.8

IKARUS anti.virus
Virus.Win32.Dracur
t3scan.2.2.29

K7 AntiVirus
Trojan
13.176.11663

Kaspersky
Trojan.Win32.Llac
14.0.0.2154

Malwarebytes
Trojan.PWS
v2015.04.22.03

McAfee
Generic PWS.sz
5600.6788

Microsoft Security Essentials
Threat.Undefined
1.183.1427.0

MicroWorld eScan
Trojan.Agent.AROC
16.0.0.336

NANO AntiVirus
Trojan.Win32.Llac.czcrh
0.28.0.58873

Norman
Malware
11.20150422

nProtect
Trojan/W32.Hijack.303616.B
14.09.03.01

Panda Antivirus
Trj/Spy.YM
15.04.22.03

Qihoo 360 Security
Trojan.Win32.Inject.B
1.0.0.1015

Quick Heal
Worm.Rebhip.A8
4.15.12.00

Rising Antivirus
PE:Trojan.Win32.Llac.a!1075351420
23.00.65.15420

Sophos
Mal/Behav-328
4.98

SUPERAntiSpyware
Trojan.Agent/Gen-Kryptik
9921

Total Defense
Win32/SillyAutorun.DUU
37.0.10857

Trend Micro House Call
TSPY_LLAC.SM
7.2.112

Trend Micro
TSPY_LLAC.SM
10.465.22

Vba32 AntiVirus
Trojan.Llac
3.12.26.0

VIPRE Antivirus
Threat.4728359
32210

ViRobot
Trojan.Win32.A.Llac.296448
2011.4.7.4223

File size:
290 KB (296,960 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
6/20/1992 5:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6144:2OpslFlqMhdBCkWYxuukP1pjSKSNVkq/MVJbU:2wslHTBd47GLRMTbU

Entry address:
0xE1A8

Entry point:
55, 8B, EC, B9, 17, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 51, 53, B8, A8, E0, 40, 00, E8, 1D, 71, FF, FF, 33, C0, 55, 68, 33, E8, 40, 00, 64, FF, 30, 64, 89, 20, 8D, 45, EC, E8, D3, 85, FF, FF, 8B, 45, EC, E8, 33, 5A, FF, FF, 50, 6A, 00, 6A, 00, E8, 39, 72, FF, FF, 8B, D8, E8, BA, 72, FF, FF, 3D, B7, 00, 00, 00, 75, 12, 53, E8, F5, 71, FF, FF, 68, E0, 2E, 00, 00, E8, 2B, 73, FF, FF, EB, 06, 53, E8, E3, 71, FF, FF, 8D, 45, E8, E8, EF, 84, FF, FF, 8B, 45, E8, E8, F3, 59, FF, FF, 50, 6A, 00, 6A, 00, E8, F9...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
54.5 KB (55,808 bytes)

Remove test.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.