home

Windows 7 Loader.exe

Windows 7 Loader

The executable Windows 7 Loader.exe has been detected as malware by 30 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from docviewer.yandex.com.
Product:
Windows 7 Loader

Version:
1.0.0.0

MD5:
2d0f7307c5e47c4809174b38c46b34bf

SHA-1:
34cb9c796628922a055732bf576fd4eb63975ba8

SHA-256:
364e43e22c08f6e63eb13c62e2361e756902d21b8aee33dad204b66f67cef998

Scanner detections:
30 / 68

Status:
Malware

Analysis date:
4/19/2024 1:52:17 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Zusy.166902
380

Agnitum Outpost
Trojan.DR.Dapato
7.1.1

Avira AntiVirus
TR/Dropper.MSIL.200655
8.3.2.4

Arcabit
Trojan.Zusy.D28BF6
1.0.0.642

avast!
Win32:Dropper-gen [Drp]
2014.9-160120

AVG
MSIL9
2017.0.2858

Baidu Antivirus
Trojan.Win32.Dropper
4.0.3.16120

Bitdefender
Gen:Variant.Zusy.166902
1.0.20.100

Dr.Web
Trojan.DownLoader16.32247
9.0.1.020

Emsisoft Anti-Malware
Gen:Variant.Zusy.166902
8.16.01.20.01

ESET NOD32
Win32/TrojanDownloader.Agent.BUR (variant)
10.12844

Fortinet FortiGate
W32/Dapato.NYMX!tr
1/20/2016

F-Secure
Gen:Variant.Zusy.166902
11.2016-20-01_4

G Data
Gen:Variant.Zusy.166902
16.1.25

IKARUS anti.virus
Virus.Win32.Sality
t3scan.1.9.5.0

K7 AntiVirus
Riskware
13.212.18377

Kaspersky
Trojan-Dropper.Win32.Dapato
14.0.0.787

McAfee
Artemis!2D0F7307C5E4
5600.6514

Microsoft Security Essentials
HackTool:Win32/Gendows
1.1.12400.0

MicroWorld eScan
Gen:Variant.Zusy.166902
17.0.0.60

NANO AntiVirus
Trojan.Win32.Dapato.dxetcw
1.0.14.5380

nProtect
Trojan-Dropper/W32.Dapato.4135424
16.01.08.02

Panda Antivirus
Trj/CI.A
16.01.20.01

Qihoo 360 Security
HEUR/QVM03.0.Malware.Gen
1.0.0.1077

Quick Heal
HackTool.Gendows.g4 (Not a Virus)
1.16.14.00

Rising Antivirus
PE:Malware.Generic/QRS!1.9E2D [F]
23.00.65.16118

Sophos
Windows 7 Loader (PUA)
4.98

Trend Micro
TROJ_GEN.R01TC0DIM15
10.465.20

VIPRE Antivirus
Trojan.Win32.Generic
46386

Zillya! Antivirus
Dropper.Dapato.Win32.26863
2.0.0.2596

File size:
3.9 MB (4,135,424 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2014

Original file name:
Windows 7 Loader.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\windows 7 loader.exe

File PE Metadata
Compilation timestamp:
9/17/2015 6:37:26 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:6EYCFEfn+4NWcNKg/ngk4mY0bI1Wymfgvn81yJffTpuWV355FXw/+cuWV355FXw+:6EYz38cgg/ngk4mYfA7fgvn812nvu

Entry address:
0x3EE75E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
3.9 MB (4,114,432 bytes)

The file Windows 7 Loader.exe has been seen being distributed by the following URL.

https://docviewer.yandex.com/source?id=14r3e-9htt1qcdlvmyc170b3oq9uqi98k3f4k9ucca7s8prnak8vvidwc4acyuopjxzxcnwv6l5be3ojwb3by0ohrqqx1k6mx6uprywjs&archive-path=//Windows 7 Loader.exe&ts=1500acdf7f4&token=JzkfI2WO7yIK OsqDSHfwQ==&name=Windows_Loader.zip

Remove Windows 7 Loader.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.