win7x86.exe
The executable win7x86.exe has been detected as malware by 31 anti-virus scanners. According to the AV engines that detect this, it is a detection for a file infected by members of the Win32/Ramnit malware family and may drop and load other malware.
MD5:
45790c80c84b41856a30332e1bb29147
SHA-1:
b28f4d6e7441f0266a75a07a6e6f9c458550dcc8
SHA-256:
cce353088742e09e9f399f115775be1bd6a935638f16ecdba89337814cd9f613
Scanner detections:
31 / 68
Status:
File is infected by a Virus
Explanation:
The file is infected by a polymorphic file infector virus.
Analysis date:
4/25/2024 8:36:54 AM UTC (today)
Scan engine
Detection
Engine version
Lavasoft Ad-Aware
Gen:Trojan.Heur.wu1@rD71VEaib
1017
Agnitum Outpost
Win32.Ramnit.Gen.2
7.1.1
AhnLab V3 Security
Worm/Win32.Sohaned
14.04.24
Avira AntiVirus
W32/Ramnit.C
7.11.145.18
avast!
AutoIt:AutoRun-B@BC [Wrm]
2014.9-140424
AVG
Worm/AutoRun
2015.0.3495
Bitdefender
Gen:Trojan.Heur.wu1@rD71VEaib
1.0.20.570
Bkav FE
W32.HfsAutoA
1.3.0.4959
Comodo Security
Virus.Win32.Ramnit.K
18158
Dr.Web
Win32.HLLW.Autoruner1.54163
9.0.1.0114
Emsisoft Anti-Malware
Gen:Trojan.Heur.wu1@rD71VEaib
8.14.04.24.05
Fortinet FortiGate
W32/Ramnit.A
4/24/2014
F-Prot
W32/Ramnit.E
v6.4.7.1.166
F-Secure
Gen:Trojan.Heur.wu1@rD71VEaib
11.2014-24-04_5
G Data
Gen:Trojan.Heur.wu1@rD71VEaib
14.4.24
IKARUS anti.virus
Worm.Win32.AutoIt
t3scan.1.6.1.0
K7 AntiVirus
Virus
13.176.11861
Malwarebytes
Worm.AutoRun.FLDGen
v2014.04.24.05
McAfee
W32/Ramnit.a
5600.7151
Microsoft Security Essentials
Worm:Win32/Nuqel.AR
1.10502
MicroWorld eScan
Gen:Trojan.Heur.wu1@rD71VEaib
15.0.0.342
NANO AntiVirus
Virus.Win32.Nimnul.bmnup
0.28.0.59492
Norman
Suspicious.A
11.20140424
Panda Antivirus
Trj/Autoit.gen
14.04.24.05
Quick Heal
W32.Ramnit.D
4.14.12.00
Rising Antivirus
PE:Malware.FakeFolder@CV!1.6AA9
23.00.65.14422
SUPERAntiSpyware
Trojan.Agent/Gen-Nuqel
10647
Trend Micro
PAK_Generic.006
10.465.24
VIPRE Antivirus
Virus.Win32.Ramnit.a!dam
28562
ViRobot
Worm.Win32.AutoIt.267087
2011.4.7.4223
File size:
366.3 KB (375,135 bytes)
File type:
Executable application (Win32 EXE)
Language:
English (United Kingdom)
Common path:
C:\Program Files\realtek\rtl8187 wireless lan utility\driver\win7x86.exe
Compilation timestamp:
5/16/2008 10:33:14 AM
CTPH (ssdeep):
6144:IYZTNk3D6LyUXwLLk+cR3qh0GQ43VJRD0ew+/UO7BAB99KU1DmRZ9EBVLX64HBN:ISNC80I+cR3R03VseuOtK99z1DmClXhn
Entropy:
7.8181 (probably packed)
Code size:
224 KB (229,376 bytes)