home

recycle.exe

The executable recycle.exe has been detected as malware by 9 anti-virus scanners.
MD5:
9c55d435d2ff4c665a93d8eb1c21f2dd

SHA-1:
489b14b85f44d29e15e7c66ff7e0bba53d74d796

SHA-256:
210282df883786d1df0b8135e6c4c985a38d6d851a26770cce6091576539d5e5

Scanner detections:
9 / 68

Status:
Malware

Analysis date:
4/30/2024 10:25:31 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Dropper.Gen
7.9.1.108

Emsisoft A-Squared
Trojan.Win32.FlyStudio!IK
4.5.0.43

Dr.Web
Win32.HLLW.Autoruner.4360
9.0.1.073

F-Prot
W32/Nuj.A.gen
v6.4.5.1.85

IKARUS anti.virus
Trojan.Win32.FlyStudio
t3scan.1.1.74.0

Microsoft Security Essentials
Backdoor:Win32/FlyAgent.F
1.163.1557.0

Rising Antivirus
Worm.Win32.ECode.fs
23.00.65.17312

Sophos
Mal/EncPk-GF
4.48

Vba32 AntiVirus
Trojan-Dropper.Win32.Flystud.ko
3.12.12.0

File size:
1.2 MB (1,247,810 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\s-1-5-31-1286970278978-5713669491-166975984-320\rotinom\mydocuments\recycle.exe

File PE Metadata
Compilation timestamp:
12/25/1972 1:33:23 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
4.0

Entry address:
0x1171

Entry point:
50, 83, E0, 00, 56, 57, 52, 53, 51, 0F, 84, E0, FF, FF, FF, EB, 32, 74, 8A, E4, 72, A9, 4E, AE, 17, F3, 06, 08, C2, 01, F2, 41, 5E, A0, FB, B2, A5, 32, 4F, DF, E6, 5B, 4C, BF, 06, FD, 9F, 57, C6, 67, AD, 8E, 43, C9, 32, 3C, C3, EB, 27, 84, AE, 1F, EA, 0F, 85, 3B, 01, 00, 00, 0F, 83, 4A, 00, 00, 00, 4C, DB, 75, 99, 8A, 0D, 2D, BE, 69, BE, 72, 32, 8D, 83, C0, FF, F8, 0F, 83, DD, FF, FF, FF, 45, 3B, 2B, 4F, B7, F8, FD, 04, 5B, FF, 4C, 27, FB, 44, 4F, EC, 8A, 3D, B3, 13, 5A, 43, 7B, 69, 8F, 3C, 0A, 91, D4, 77...
 
[+]

Entropy:
7.9464  (probably packed)

Code size:
24 KB (24,576 bytes)

Remove recycle.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.