home

video_garrafa5.scr

novo3241

Particular

The file video_garrafa5.scr has been detected as malware by 30 anti-virus scanners.
Publisher:
Particular

Product:
novo3241

Version:
1.00

MD5:
47f9aa9fb1e89505c489d05a55e89fae

SHA-1:
691ba032bfec37a08c8083d3d51e7b044c209c5a

SHA-256:
8ce701be5634f07f86c6a076a668433c6ad980e09a06ff58fcf9b401078cd4f6

Scanner detections:
30 / 68

Status:
Malware

Analysis date:
2/7/2026 9:41:32 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Trojan.Vilsel.Gen
7.1.1

AhnLab V3 Security
Trojan/Win32.MSNPass
2013.08.19

Avira AntiVirus
TR/Crypt.CFI.Gen
7.11.97.46

avast!
Win32:MSNPass-H [Trj]
2014.9-170315

Bitdefender
Gen:Trojan.Heur.ii0arnAYGEeiu
1.0.20.370

Comodo Security
TrojWare.Win32.PSW.Ldpinch.~NNT
16790

Dr.Web
Trojan.Click.20169
9.0.1.074

Emsisoft Anti-Malware
Gen:Trojan.Heur.ii0arnAYGEeiu
8.17.03.15.05

ESET NOD32
Win32/VB.OBS (variant)
11.8701

Fortinet FortiGate
W32/FakeAV.FE!tr
3/15/2017

F-Prot
W32/SuspPack.G.gen
v6.4.7.1.166

F-Secure
Trojan-Spy:W32/Banker.JGT
11.2017-15-03_4

G Data
Gen:Trojan.Heur.ii0arnAYGEeiu
17.3.22

IKARUS anti.virus
Trojan-Downloader.Win32.VB
t3scan.2.0.127

K7 AntiVirus
Trojan
13.170.9312

Kaspersky
Trojan.Win32.Vilsel
14.0.0.-1311

Malwarebytes
Worm.Ructo
v2017.03.15.05

McAfee
Generic BackDoor.wg
5600.6095

Microsoft Security Essentials
VirTool:Win32/Obfuscator.LC
1.163.1557.0

MicroWorld eScan
Gen:Trojan.Heur.ii0arnAYGEeiu
18.0.0.222

NANO AntiVirus
Trojan.Win32.Vilsel.bqjeeh
0.26.0.53954

Norman
Packed_NTKrnl.B
11.20170315

Panda Antivirus
Trj/Genetic.gen
17.03.15.05

Quick Heal
(Suspicious) - DNAScan
3.17.12.00

Sophos
Mal/Particula-A
4.91

SUPERAntiSpyware
Trojan.Agent/Gen-Falcomp
8535

Total Defense
Win32/SillyDl.PVN!packed
37.0.10498

Trend Micro House Call
TROJ_GEN.F47V0514
7.2.74

Trend Micro
WORM_RUCTO.SMI
10.465.15

Vba32 AntiVirus
SScope.Trojan-Downloader.Win32.Banload.bfn
3.12.22.3

File size:
138.5 KB (141,824 bytes)

Product version:
1.00

Original file name:
project1.exe

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\video_garrafa5.scr

File PE Metadata
Compilation timestamp:
8/17/2001 5:52:32 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.160

Entry address:
0x1061

Entry point:
68, 95, F4, 41, 00, E8, 01, 00, 00, 00, C3, C3, 1E, 04, FE, 00, E2, A9, 2D, FC, 27, 89, 11, E6, D4, 06, 95, E4, 91, 67, BA, CF, CE, 8E, E2, C3, CF, C1, 7A, AB, 80, 79, F5, DA, C5, 3D, 2D, 9E, DF, A8, 3C, 8C, 3F, DB, 09, 98, 1A, 63, 5F, 72, F1, 9A, 8B, 82, F5, 24, 40, FC, A4, 95, 70, 7C, A7, 5F, E0, D7, E3, 35, 43, 5B, F0, AC, A1, 38, C6, 81, 82, 1B, 2B, 9B, 8B, 89, 72, 93, B7, 72, 94, 56, 90, 6E, 84, 94, BB, 12, B4, 01, E8, 96, 14, 36, E9, E2, 41, BF, F0, 8F, 97, 55, BA, 5A, 66, DF, 4D, 46, E1, 80, 69, 4D...
 
[+]

Packer / compiler:
ReversingLabsProtector 0.7.4 beta

Code size:
532 KB (544,768 bytes)

Remove video_garrafa5.scr - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.