home

xf-adsk2015_x64.exe

The application xf-adsk2015_x64.exe has been detected as a potentially unwanted program by 18 anti-malware scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from dc97.4shared.com and multiple other hosts.
MD5:
015a355a7890a08dfb38868f8a45610a

SHA-1:
c91e544455d4a513bd46794531785fbdf4ce05dc

SHA-256:
71baab951f223bcd95039cc838e959469d0d770b62c0479e3e62bb4ede677a99

Scanner detections:
18 / 68

Status:
Potentially unwanted

Analysis date:
4/27/2024 1:23:00 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Malware-gen
2014.9-141121

AVG
Crack
2015.0.3525

Bkav FE
W32.HfsPikanver
1.3.0.4959

Emsisoft Anti-Malware
Riskware.Win32.Keygen
11.5.0.6191

ESET NOD32
Win32/Keygen.HA potentially unsafe application
7.0.302.0

Fortinet FortiGate
Riskware/KeyGen
3/24/2014

G Data
Win32.Trojan.Agent.95G8VV
14.11.24

IKARUS anti.virus
possible-Threat.XForce
t3scan.2.2.29

K7 AntiVirus
Trojan
13.176.11540

Malwarebytes
Trojan.Agent.CK
v2014.11.21.12

McAfee
Artemis!015A355A7890
5600.7181

Microsoft Security Essentials
Threat.Undefined
1.223.968.0

NANO AntiVirus
Trojan.Win32.BrowseBan.cuxttz
0.28.0.58491

Norman
Suspicious_Gen4.FCBWC
11.20141121

Reason Heuristics
Threat.Win.Reputation.IMP
14.11.21.12

Trend Micro House Call
TROJ_GEN.F47V0319
7.2.83

VIPRE Antivirus
Trojan.Win32.Generic
27702

XVirus List
Win.Detected
2.3.31

File size:
321.5 KB (329,216 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\xf-adsk2015_x64.exe

File PE Metadata
Compilation timestamp:
3/18/2014 5:02:35 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:ZMEuEWdCgGPVw7wzXfx2iK86fRy4rJlnro0ZHYnQ0Gk0B/v3oSf:KEuE7gX7w12ySXZQ0B//oSf

Entry address:
0x12FFD0

Entry point:
60, BE, 00, 30, 4E, 00, 8D, BE, 00, E0, F1, FF, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, C9, D9, 12, 00, 57, 83, C3, 04, 53, 68, C1, CF, 04, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 00, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Code size:
312 KB (319,488 bytes)

The file xf-adsk2015_x64.exe has been seen being distributed by the following 11 URLs.

http://dc97.4shared.com/download/.../xforce_-_autodesk_2015_x64.exe

https://docs.google.com/a/.../uc?export=download&confirm=bxfK&id=0B7eGUvM7ZuaAOWJKWjFEdHN5YzQ

https://cloclo14.cldmail.ru/4fqPjDubBtdxgpWBwNd/G/CNPR/.../xf-adsk2015_x64.exe

https://mail.yandex.by/.../xf-adsk2015_x64.exe

http://dc457.4shared.com/download/.../xforce_-_autodesk_2015_x64.exe

http://s7014.chomikuj.pl/File.aspx?e=DanTa1wNCoY90hyAO651Q9-3zOw7yIiRAFiflDpke1KUzT63kfAiKVmKXjcMXOuFk2XSRb6BXBfptvLqoOs3_kwNZkmHrg18qsgGdYw6nLDlTZY47EoFljoHDPEQwWSJXWlwE6NTTAja0HeLl_kL5w&pv=2

http://dc97.4shared.com/download/.../xf-adsk2015_x64.exe

http://s7014.chomikuj.pl/File.aspx?e=DanTa1wNCoY90hyAO651Q9-3zOw7yIiRAFiflDpke1KKrogGF9mC-ZLSl0PUlWuQ2zDvhbRqYK3LRIHARaXg6Ox6OWwpuGl617FeebKoMyuB9QLDJ6oCUeGUvWXfRKEuCJJdFKXSUonKiCnGIJUoyA&pv=2

http://dl.free.fr/nwLNUn6ev

https://dl-web.dropbox.com/get/.../xf-adsk2015_x64.exe

http://dc592.4shared.com/download/.../xf-adsk2015_x64.exe

Remove xf-adsk2015_x64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.