home

d760ff4daf47bf8eae847ca76fb9eee0.pe

Microsoft Windows 2000 Operating System

While the file properties state the file is developed by 'Microsoft Corporation', this is not the case and it is designed just to look like a legitimate Microsoft system file. The file d760ff4daf47bf8eae847ca76fb9eee0.pe, “Microsoft (R) Windows Explorer” has been detected as malware by 40 anti-virus scanners.
Publisher:
Microsoft Corporation*  (Invalid match)

Product:
Microsoft(R) Windows(R) 2000 Operating System

Description:
Microsoft (R) Windows Explorer

Version:
5.50.4134.100

MD5:
d760ff4daf47bf8eae847ca76fb9eee0

SHA-1:
e34c9ce24f76892ecd77443aeb7688b7ca8e793a

SHA-256:
1c02479c326d5e54cb1e33d41f80cc27ec33e02c8821cdfb63660673902d1fcc

Scanner detections:
40 / 68

Status:
Malware

Analysis date:
4/25/2024 1:49:34 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Generic.7014451
658

Agnitum Outpost
Trojan.Malagent
7.1.1

AhnLab V3 Security
Trojan/Win32.Agent
2015.04.06

Avira AntiVirus
TR/Downloader.Gen
3.6.1.96

avast!
Win32:GenMalicious-HDP [Trj]
2014.9-150418

AVG
Generic_r
2016.0.3136

Baidu Antivirus
Trojan.Win32.Cosmu
4.0.3.15418

Bitdefender
Trojan.Generic.7014451
1.0.20.540

Bkav FE
W32.BaragoneE.Trojan
1.3.0.6379

Clam AntiVirus
Trojan.Mybot-12000
0.98/21511

Comodo Security
TrojWare.Win32.Cosmu.NJC
21663

Dr.Web
Trojan.Click1.57939
9.0.1.0108

Emsisoft Anti-Malware
Trojan.Generic.7014451
8.15.04.18.08

ESET NOD32
Win32/Agent.NJC
9.11430

Fortinet FortiGate
W32/Agent.NJC!tr
4/18/2015

F-Prot
W32/Busky.B.gen
v6.4.7.1.166

F-Secure
Trojan.Generic.7014451
11.2015-18-04_7

G Data
Trojan.Generic.7014451
15.4.25

IKARUS anti.virus
Trojan.Win32.Sisron
t3scan.1.8.9.0

K7 AntiVirus
Trojan
13.202.15489

Kaspersky
Trojan.Win32.Cosmu
14.0.0.2173

Malwarebytes
Backdoor.Agent
v2015.04.18.08

McAfee
Downloader-FCK
5600.6792

Microsoft Security Essentials
Trojan:Win32/Phishbank.A
1.1.11502.0

MicroWorld eScan
Trojan.Generic.7014451
16.0.0.324

NANO AntiVirus
Trojan.Win32.Cosmu.dpygfo
0.30.8.659

Norman
Genetik.E
11.20150418

nProtect
Trojan.Generic.7014451
15.04.03.01

Panda Antivirus
Trj/Genetic.gen
15.04.18.08

Qihoo 360 Security
Malware.Radar02.Gen
1.0.0.1015

Quick Heal
Trojan.Malagent.az3
4.15.14.00

Rising Antivirus
PE:Trojan.Win32.Cosmu.b!1075349515
23.00.65.15416

Sophos
Troj/BanPhish-B
4.98

SUPERAntiSpyware
Trojan.Agent/Phishbank
9928

Total Defense
Win32/Cosmu.OP
37.0.11533

Trend Micro House Call
TROJ_COSMU.SMJ0
7.2.108

Trend Micro
TROJ_PHISHBANK.BMC
10.465.18

Vba32 AntiVirus
Worm.Mirror.01
3.12.26.3

VIPRE Antivirus
Trojan.Win32.Generic!SB.0
39098

Zillya! Antivirus
Trojan.Cosmu.Win32.13747
2.0.0.2128

File size:
116.8 KB (119,604 bytes)

Product version:
5.50.4134.100

Copyright:
Copyright (C) Microsoft Corp. 1981-2000

Original file name:
servicess.exe

Language:
Russian (Russia)

Common path:
C:\users\{user}\downloads\d760ff4daf47bf8eae847ca76fb9eee0.pe

File PE Metadata
Compilation timestamp:
7/19/2010 5:33:53 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:FNxU+W+73uSpoo3e/8+dcr2yS7yt0xzSjo2V5Duuu5AEqaFFS:NU+W+qNo3e9Sy/K88zpuuu5A0FS

Entry address:
0xA42F

Entry point:
55, 8B, EC, 6A, FF, 68, 68, 25, 40, 00, 68, B0, A5, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, E8, 10, 40, 00, 59, 83, 0D, 08, D9, E6, 04, FF, 83, 0D, 0C, D9, E6, 04, FF, FF, 15, EC, 10, 40, 00, 8B, 0D, F8, A5, 40, 00, 89, 08, FF, 15, F0, 10, 40, 00, 8B, 0D, F4, A5, 40, 00, 89, 08, A1, F4, 10, 40, 00, 8B, 00, A3, 04, D9, E6, 04, E8, 11, 01, 00, 00, 39, 1D, 20, 68, 40, 00, 75, 0C, 68, AC, A5, 40, 00, FF, 15, F8, 10...
 
[+]

Entropy:
6.9430

Developed / compiled with:
Microsoft Visual C++ v6.0

Remove d760ff4daf47bf8eae847ca76fb9eee0.pe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.