home

呦呦-加强i版.exe

易语言程序

The application 呦呦-加强i版.exe has been detected as a potentially unwanted program by 34 anti-malware scanners.
Product:
易语言程序

Version:
1.0.0.0

MD5:
d1df197e4eb8f6e1793796fe3c12dd77

SHA-1:
350805a04e442c4c43006f1c14ab4a0b524065e0

SHA-256:
e471c937795d1510f9963041f562604c91d7feb5a500bfed31131ffce7cbc2ee

Scanner detections:
34 / 68

Status:
Potentially unwanted

Analysis date:
5/2/2024 5:25:26 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Generic.7726437
-40

Agnitum Outpost
Trojan.DR.Bototer
7.1.1

AhnLab V3 Security
Dropper/Bototer.667648.I
2015.03.01

Avira AntiVirus
TR/Orsam.A.7358
7.11.212.246

avast!
Win32:Trojan-gen
2014.9-170315

AVG
Dropper.Generic2
2018.0.2438

Bitdefender
Trojan.Generic.7726437
1.0.20.370

Clam AntiVirus
Trojan.Dropper-26178
0.98/21511

Comodo Security
Worm.Win32.Dropper.RA
21245

Dr.Web
Trojan.MulDrop1.48321
9.0.1.074

Emsisoft Anti-Malware
Trojan.Generic.7726437
8.17.03.15.09

ESET NOD32
Win32/FlyStudio potentially unwanted (variant)
11.11249

Fortinet FortiGate
Riskware/Qhost
3/15/2017

F-Prot
W32/Agent.EW.gen
v6.4.7.1.166

F-Secure
Trojan:W32/DelfInject.R
11.2017-15-03_4

G Data
Trojan.Generic.7726437
17.3.25

IKARUS anti.virus
Trojan-Dropper.Win32.Bototer
t3scan.1.8.6.0

K7 AntiVirus
Trojan
13.1915118

Kaspersky
UDS:DangerousObject.Multi.Generic
14.0.0.-1314

Malwarebytes
Spyware.OnlineGames
v2017.03.15.09

McAfee
Generic FakeAlert.iv
5600.6094

Microsoft Security Essentials
Trojan:Win32/Orsam!rts
1.1.11400.0

MicroWorld eScan
Trojan.Generic.7726437
18.0.0.222

NANO AntiVirus
Trojan.Win32.Bototer.czxsvx
0.30.0.296

Norman
OnLineGames.LWBP
11.20170315

nProtect
Trojan-Dropper/W32.Bototer.667648.B
15.02.27.01

Panda Antivirus
Generic Malware
17.03.15.09

Quick Heal
TrojanDropper.Bototer.r4
3.17.14.00

Rising Antivirus
PE:Trojan.Win32.Generic.13571AEE!324475630
23.00.65.17313

Sophos
Mal/Generic-S
4.98

SUPERAntiSpyware
Trojan.Agent/Gen-OnlineGames
8533

Total Defense
Win32/Oflwr.A!crypt
37.0.11469

ViRobot
Dropper.A.Bototer.667648[h]
2014.3.20.0

Zillya! Antivirus
Dropper.Bototer.Win32.449
2.0.0.2085

File size:
652 KB (667,648 bytes)

Product version:
1.0.0.0

Copyright:
作者版权所有 请尊重并使用正版

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
7/9/2010 12:03:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x50491

Entry point:
55, 8B, EC, 6A, FF, 68, 78, F7, 47, 00, 68, FC, 4C, 45, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 2C, 03, 47, 00, 33, D2, 8A, D4, 89, 15, B0, 1E, 4B, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, AC, 1E, 4B, 00, C1, E1, 08, 03, CA, 89, 0D, A8, 1E, 4B, 00, C1, E8, 10, A3, A4, 1E, 4B, 00, 6A, 01, E8, A6, 47, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 51, 45, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
6.2369

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
444 KB (454,656 bytes)

Remove 呦呦-加强i版.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.