home

comprovante_pdf03_.exe

fc38aaaf6db141a4849623232e87e430

The executable comprovante_pdf03_.exe has been detected as malware by 33 anti-virus scanners. According to AVG, this software downloads additional adware offers during setup.
Product:
fc38aaaf6db141a4849623232e87e430

Version:
1.0.0.0

MD5:
95651622ca1a30d5563a8eee19c718c5

SHA-1:
e5f68ee427de094695d865bb80518a26d995fcc7

SHA-256:
0ec67cbf5153f68249cdc58e36b427bdb8e7ce13f64687197f95ac0a4c3f8faa

Scanner detections:
33 / 68

Status:
Malware

Analysis date:
4/27/2024 7:24:37 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Downloader.JRTO
-40

AegisLab AV Signature
Uds.Dangerousobject.Multi!c
2.1.4+

AhnLab V3 Security
Trojan/Win32.Banload.C911114
3.8.2.16

Avira AntiVirus
TR/Dldr.Agent.22016.68
8.3.3.4

Arcabit
Trojan.Downloader.JRTO
1.0.0.792

avast!
MSIL:Banker-AI [Trj]
2014.9-170315

AVG
Downloader.MSIL
2018.0.2438

Bitdefender
Trojan.Downloader.JRTO
1.0.20.370

Comodo Security
UnclassifiedMalware
26357

Dr.Web
Trojan.DownLoad3.36733
9.0.1.074

Emsisoft Anti-Malware
Trojan.Downloader.JRTO
8.17.03.15.11

ESET NOD32
MSIL/TrojanDownloader.Agent.ASV (variant)
11.14681

Fortinet FortiGate
MSIL/Agent.ASW!tr.dldr
3/15/2017

F-Secure
Trojan.Downloader.JRTO
11.2017-15-03_4

G Data
Trojan.Downloader.JRTO
17.3.25

IKARUS anti.virus
Trojan-Downloader.MSIL.Agent
0.1.3.4

K7 AntiVirus
Trojan-Downloader
13.246.21929

Kaspersky
HEUR:Trojan.Win32.Generic
14.0.0.-1315

Malwarebytes
Trojan.Agent.WHSGen
v2017.03.15.11

McAfee
PWS-FCBK!95651622CA1A
5600.6094

Microsoft Security Essentials
TrojanDownloader:MSIL/Banload.P
1.1.13303.0

MicroWorld eScan
Trojan.Downloader.JRTO
18.0.0.222

NANO AntiVirus
Trojan.Win32.Agent.drqsdm
1.0.70.14475

Panda Antivirus
Trj/CI.A
17.03.15.11

Qihoo 360 Security
HEUR/QVM03.0.Malware.Gen
1.0.0.1120

Quick Heal
TrojanDownloader.Banload.A4
3.17.14.00

Rising Antivirus
Trojan.Generic-1Sh48QmhIUS (cloud)
23.00.65.17313

Sophos
Troj/MSIL-DDI
4.98

Trend Micro House Call
TROJ_BANLOAD.YWNIC
7.2.74

Trend Micro
TROJ_BANLOAD.YWNIC
10.465.15

VIPRE Antivirus
Trojan.Win32.Generic
54828

ViRobot
Trojan.Win32.Z.Agent.22016.UR[h]
2014.3.20.0

Zillya! Antivirus
Trojan.Agent.Win32.540695
2.0.0.3165

File size:
21.5 KB (22,016 bytes)

Product version:
1.0.0.0

Copyright:
fc38aaaf6db141a4849623232e87e430

Original file name:
77777777777777777777u7777777777777777777777.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\comprovante_pdf03_.exe

File PE Metadata
Compilation timestamp:
5/14/2015 7:32:13 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

Entry address:
0x606E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
16.5 KB (16,896 bytes)

Remove comprovante_pdf03_.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.