home

f5fedf3f0f84bb5ff68df4b90be6bcb0.pe

The file f5fedf3f0f84bb5ff68df4b90be6bcb0.pe has been detected as malware by 35 anti-virus scanners.
MD5:
f5fedf3f0f84bb5ff68df4b90be6bcb0

SHA-1:
50fa849768fe55c0c4ec5df5866c05cae1edb4a1

SHA-256:
0abc59368713ba19f2eefa1f44178559d5da47a8c96a156b09f45755f5e4b399

Scanner detections:
35 / 68

Status:
Malware

Analysis date:
4/26/2024 11:56:18 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Win32.VJadtre.3
658

Agnitum Outpost
Win32.Otwycal.Gen.2
7.1.1

AhnLab V3 Security
Win32/Wampori
2015.03.30

avast!
Win32:Qmgr-C [Trj]
2014.9-150418

AVG
Win32/Wapomi
2016.0.3136

Baidu Antivirus
Virus.Win32.Otwycal.$a
4.0.3.15418

Bitdefender
Win32.VJadtre.3
1.0.20.540

Bkav FE
W32.HfsAutoB
1.3.0.6379

Comodo Security
Virus.Win32.Wapomi.AA
21584

Dr.Web
Win32.HLLP.Protil.1
9.0.1.0108

Emsisoft Anti-Malware
Win32.VJadtre
8.15.04.18.09

ESET NOD32
Win32/Wapomi.AA
9.11395

Fortinet FortiGate
W32/Agent.R!tr
4/18/2015

F-Prot
W32/Injector.A.gen
v6.4.7.1.166

F-Secure
Win32.VJadtre.3
11.2015-18-04_7

G Data
Win32.VJadtre
15.4.25

IKARUS anti.virus
Trojan.Backdoor.Agent
t3scan.1.8.9.0

K7 AntiVirus
Virus
13.202.15417

Kaspersky
Virus.Win32.Otwycal
14.0.0.2173

Malwarebytes
Virus.Wapomi
v2015.04.18.09

McAfee
W32/Simfect
5600.6792

Microsoft Security Essentials
Virus:Win32/Mikcer.A
1.1.11502.0

MicroWorld eScan
Win32.VJadtre.3
16.0.0.324

NANO AntiVirus
Virus.Win32.Otwycal.dszex
0.30.8.659

Norman
Kryptik.CDHN
11.20150418

nProtect
Win32.VJadtre.3
15.03.27.01

Quick Heal
W32.Otwyacal.C
4.15.14.00

Sophos
W32/Patched-AG
4.98

Total Defense
Win32/Wapomi.CD
37.0.11518

Trend Micro House Call
PE_WAPOMI.SM
7.2.108

Trend Micro
PE_WAPOMI.SM
10.465.18

Vba32 AntiVirus
Virus.Otwycal.a
3.12.26.3

VIPRE Antivirus
Virus.Win32.Otwycal.ab
38878

ViRobot
Win32.Otwycal.A[h]
2014.3.20.0

Zillya! Antivirus
Virus.Otwycal.Win32.1
2.0.0.2120

File size:
164 KB (167,936 bytes)

Common path:
C:\users\{user}\downloads\f5fedf3f0f84bb5ff68df4b90be6bcb0.pe

File PE Metadata
Compilation timestamp:
2/13/2011 3:07:03 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:mKNQj7g0TzzZiOe8PE48yE9z3HyKNQj7g0TzzZiOe8PE48yE9z3H:mUQjs0eUE4zUz3SUQjs0eUE4zUz3

Entry address:
0x24000

Entry point:
55, 8B, EC, 81, EC, 88, 00, 00, 00, 83, 65, EC, 00, 83, 65, B0, 00, 83, 65, E0, 00, 83, 65, F0, 00, 83, 65, FC, 00, C7, 45, C4, 43, 3A, 5C, 35, C7, 45, C8, 64, 33, 38, 33, C7, 45, CC, 62, 33, 35, 2E, C7, 45, D0, 65, 78, 65, 00, E8, 00, 00, 00, 00, 58, 05, 9B, 02, 00, 00, 89, 45, E8, 64, A1, 30, 00, 00, 00, 89, 45, D8, 8B, 45, E8, C7, 00, 83, C4, 04, E9, 8B, 45, D8, 8B, 40, 0C, 8B, 40, 1C, 8B, 00, 89, 45, E4, 8B, 45, E4, 8B, 40, 08, 89, 45, F4, 8B, 45, F4, 8B, 40, 3C, 8B, 4D, F4, 8B, 55, F4, 03, 54, 01, 78...
 
[+]

Entropy:
7.8487

Developed / compiled with:
Microsoft Visual C++

Code size:
205 KB (209,920 bytes)

Remove f5fedf3f0f84bb5ff68df4b90be6bcb0.pe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.