home

d0254fe78374c3db7525936395f3f1c0.pe

Cracks

The file d0254fe78374c3db7525936395f3f1c0.pe, “CracksWare Original Cracks.” has been detected as a potentially unwanted program by 44 anti-malware scanners.
Publisher:
Cracks

Description:
CracksWare Original Cracks.

Version:
5.1.2700.0D

MD5:
d0254fe78374c3db7525936395f3f1c0

SHA-1:
eeb5b29216dc7bb276a669461d4ae15d10bb4bad

SHA-256:
87363113d7f641e04b297826def3525460d57d39d6672745a2f0f8dd414e4cdf

Scanner detections:
44 / 68

Status:
Potentially unwanted

Analysis date:
4/26/2024 5:22:22 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Backdoor.Bot.158614
658

Agnitum Outpost
Trojan.DR.Loring
7.1.1

AhnLab V3 Security
Dropper/Loring.300359
2015.04.06

Avira AntiVirus
WORM/IrcBot.86875
3.6.1.96

avast!
Win32:GenMalicious-HVT [Trj]
2014.9-150418

AVG
Dropper.Generic5
2016.0.3136

Baidu Antivirus
Worm.Win32.IRCBot
4.0.3.15418

Bitdefender
Backdoor.Bot.158614
1.0.20.540

Bkav FE
W32.FamVT.LoringK.Trojan
1.3.0.4959

Comodo Security
TrojWare.Win32.IRCBot.RICD
21663

Dr.Web
Trojan.MulDrop5.7150
9.0.1.0108

Emsisoft Anti-Malware
Backdoor.Bot.158614
8.15.04.18.08

ESET NOD32
Win32/IRCBot.OV
9.11430

Fortinet FortiGate
W32/Loring.C!tr.dldr
4/18/2015

F-Prot
W32/Malware!9219
v6.4.7.1.166

F-Secure
Backdoor.Bot.158614
11.2015-18-04_7

G Data
Backdoor.Bot.158614
15.4.25

herdProtect (fuzzy)
variant of virussign.com_5650866ce4bbabc8c257275b1f6f0530.vir
2015.7.19.20

IKARUS anti.virus
Trojan-Dropper.Win32.Loring
t3scan.1.8.9.0

K7 AntiVirus
Backdoor
13.183.13113

Kaspersky
Trojan.Win32.Reconyc
14.0.0.2173

Malwarebytes
RiskWare.Tool.CK
v2015.04.18.08

McAfee
W32/Sdbot.worm.gen
5600.6792

Microsoft Security Essentials
TrojanDropper:Win32/Loring
1.1.11502.0

MicroWorld eScan
Trojan.Generic.11210422
16.0.0.324

NANO AntiVirus
Trojan.Win32.IRCBot.dmigck
0.30.8.659

Norman
Loring.A
11.20150418

nProtect
Trojan.Generic.11210422
14.08.19.01

Panda Antivirus
Trj/Dropper.AAP
15.04.18.08

Qihoo 360 Security
HEUR/QVM13.0.Malware.Gen
1.0.0.1015

Quick Heal
TrojanDropper.Loring.A11
4.15.14.00

Rising Antivirus
PE:Trojan.Win32.Generic.13327835!322074677
23.00.65.15416

Sophos
W32/Sdbot-Gen
4.98

SUPERAntiSpyware
Trojan.Keygen/Crack[Payload]
9928

Total Defense
Win32/Loring.A
37.0.11533

Trend Micro House Call
WORM_SDBOT.DMA
7.2.108

Trend Micro
WORM_SDBOT.DMA
10.465.18

Vba32 AntiVirus
Trojan.Reconyc
3.12.26.3

VIPRE Antivirus
Trojan.Win32.Generic!SB.0
39098

ViRobot
Dropper.Loring.291411[h]
2014.3.20.0

Zillya! Antivirus
Backdoor.PePatch.Win32.44848
2.0.0.2126

File size:
589.3 KB (603,451 bytes)

Product version:
5.1.2700.04 FileVersion

Copyright:
© CracksWare Corporation. All rights reserved.(

Language:
English (United States)

Common path:
C:\users\{user}\downloads\d0254fe78374c3db7525936395f3f1c0.pe

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
1536:OKD0A2T3vLbsih9e8bTTpb/IgQmP9zKcTDB4w/UjlQ/dpKRq5l:352T3siXei5bcmP9JfUjW

Entry address:
0x3B001

Entry point:
60, E8, 03, 00, 00, 00, E9, EB, 04, 5D, 45, 55, C3, E8, 01, 00, 00, 00, EB, 5D, BB, ED, FF, FF, FF, 03, DD, 81, EB, 00, B0, 03, 00, 83, BD, 22, 04, 00, 00, 00, 89, 9D, 22, 04, 00, 00, 0F, 85, 65, 03, 00, 00, 8D, 85, 2E, 04, 00, 00, 50, FF, 95, 4D, 0F, 00, 00, 89, 85, 26, 04, 00, 00, 8B, F8, 8D, 5D, 5E, 53, 50, FF, 95, 49, 0F, 00, 00, 89, 85, 4D, 05, 00, 00, 8D, 5D, 6B, 53, 57, FF, 95, 49, 0F, 00, 00, 89, 85, 51, 05, 00, 00, 8D, 45, 77, FF, E0, 56, 69, 72, 74, 75, 61, 6C, 41, 6C, 6C, 6F, 63, 00, 56, 69, 72...
 
[+]

Entropy:
1.7547

Packer / compiler:
ASPack v2.12

Code size:
160 KB (163,840 bytes)

Remove d0254fe78374c3db7525936395f3f1c0.pe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.