home

wrapper_installer.exe

The application wrapper_installer.exe has been detected as a potentially unwanted program by 17 anti-malware scanners. This is a self-extracting archive and installer, however the file is not signed with an authenticode signature from a trusted source.
MD5:
6415e40dd22ef0d4a1caa82314079350

SHA-1:
4bd7296dac5f7e23ebcd18f2bef3ab129b3a7493

SHA-256:
ae1e58b6e248346dd179c6dc02640da39fe5c719c3a3fc38bd463d935afe0702

Scanner detections:
17 / 68

Status:
Potentially unwanted

Analysis date:
4/19/2024 9:54:07 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Trojan.Heur.JP.JuW@a0MJB4mi
801

Avira AntiVirus
TR/Spy.Agent.583680.1
7.11.188.174

avast!
Win32:Dropper-gen [Drp]
2014.9-141126

AVG
Generic5
2015.0.3279

Baidu Antivirus
Adware.Win32.ICLoader
4.0.3.141126

Bitdefender
Gen:Trojan.Heur.JP.JuW@a0MJB4mi
1.0.20.1650

Comodo Security
ApplicUnwnt
20192

Emsisoft Anti-Malware
Gen:Trojan.Heur.JP.JuW@a0MJB4mi
8.14.11.26.11

ESET NOD32
Win32/Adware.ICLoader (variant)
8.10778

F-Secure
Gen:Trojan.Heur.JP.JuW@a0MJB4mi
11.2014-26-11_4

G Data
Gen:Trojan.Heur.JP.JuW@a0MJB4mi
14.11.24

K7 AntiVirus
Adware
13.185.14134

McAfee
Artemis!6415E40DD22E
5600.6935

MicroWorld eScan
Gen:Trojan.Heur.JP.JuW@a0MJB4mi
15.0.0.990

Rising Antivirus
PE:Trojan.Win32.Generic.179D5287!396186247
23.00.65.141124

Trend Micro House Call
TROJ_GEN.R0C1H09KA14
7.2.330

VIPRE Antivirus
Trojan.Win32.Generic
35118

File size:
570 KB (583,680 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\wrapper_installer.exe

File PE Metadata
Compilation timestamp:
11/10/2014 1:37:15 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
12288:BP73CpHu2ma7g2WVjadBcUdja1NpJuiLW86xrA0ZyauAyM/p3qY:xCpHXmyg2Mj6BcUdja1NpI4bYM7aPyMZ

Entry address:
0x38444

Entry point:
E8, DB, 7B, 01, 00, E9, 7F, FE, FF, FF, CC, CC, 55, 8B, EC, 56, 33, C0, 50, 50, 50, 50, 50, 50, 50, 50, 8B, 55, 0C, 8D, 49, 00, 8A, 02, 0A, C0, 74, 09, 83, C2, 01, 0F, AB, 04, 24, EB, F1, 8B, 75, 08, 8B, FF, 8A, 06, 0A, C0, 74, 0C, 83, C6, 01, 0F, A3, 04, 24, 73, F1, 8D, 46, FF, 83, C4, 20, 5E, C9, C3, 55, 8B, EC, 83, EC, 20, 56, 57, 6A, 08, 59, BE, F0, 06, 47, 00, 8D, 7D, E0, F3, A5, 8B, 75, 0C, 8B, 7D, 08, 85, F6, 74, 13, F6, 06, 10, 74, 0E, 8B, 0F, 83, E9, 04, 51, 8B, 01, 8B, 70, 18, FF, 50, 20, 89, 7D...
 
[+]

Code size:
433 KB (443,392 bytes)

Remove wrapper_installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.