home

seeback.exe

The executable seeback.exe has been detected as malware by 33 anti-virus scanners. Accoriding to the detections, this has been classified as a kyelogger which is capable of recoring a user's keystrokes.
Description:
google...

Version:
1.0.0.0

MD5:
d3a357171929fc77ae52fa1307409d37

SHA-1:
9e55e3a6efd01674a1bb26dbecb241fbef1c7d20

SHA-256:
363639d1ac8c6a445ddbec3c6c89e692130150fd0fbde67eaf840d6eb6fbebb2

Scanner detections:
33 / 68

Status:
Malware

Analysis date:
4/28/2024 1:48:40 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Generic.Malware.GSD.CCED5432
-40

AhnLab V3 Security
Trojan/Win32.Petun.N2125377318
3.7.5.15

Avira AntiVirus
TR/Spy.Gen
8.3.3.4

Arcabit
Generic.Malware.GSD.CCEDD1538
1.0.0.774

avast!
MSIL:KeyLogger-AB [Spy]
2014.9-170316

AVG
PSW.Agent.7
2018.0.2438

Baidu Antivirus
Win32.Trojan.WisdomEyes.151026.9950
4.0.3.17316

Bitdefender
Generic.Malware.GSD.CCED5432
1.0.20.375

Comodo Security
Worm.Win32.KeyLogger.AutoRun.AE
25894

Dr.Web
Trojan.Siggen3.14508
9.0.1.075

Emsisoft Anti-Malware
Generic.Malware.GSD.CCED5432
8.17.03.16.10

ESET NOD32
MSIL/Spy.Agent.BP (variant)
11.14252

Fortinet FortiGate
MSIL/KeyLogger.BA!tr
3/16/2017

F-Prot
W32/MSIL_Troj.F.gen
v6.4.7.1.166

F-Secure
Generic.Malware.GSD.CCED5432
11.2017-16-03_5

G Data
Generic.Malware.GSD.CCED5432
17.3.25

IKARUS anti.virus
Trojan-Spy.Win32.Zbot
t3scan.2.1.16.0

K7 AntiVirus
Trojan
13.242.21131

Kaspersky
HEUR:Trojan.Win32.Generic
14.0.0.-1317

Malwarebytes
Trojan.KeyLogger.MSIL
v2017.03.16.10

McAfee
PWS-Zbot.gen.yg
5600.6094

Microsoft Security Essentials
PWS:MSIL/Petun.A
1.1.13103.0

MicroWorld eScan
Generic.Malware.GSD.CCED5432
18.0.0.225

NANO AntiVirus
Trojan.Win32.Siggen3.dhbnsn
1.0.38.11822

Panda Antivirus
Trj/GdSda.A
17.03.16.10

Qihoo 360 Security
HEUR/QVM03.0.0000.Malware.Gen
1.0.0.1120

Quick Heal
Trojan.Orsam.A3
3.17.14.00

Rising Antivirus
Trojan.MSIL.KeyLogger!1.647D (classic)
23.00.65.17314

Sophos
Mal/MSIL-BA
4.98

SUPERAntiSpyware
Trojan.Agent/Gen-Petun
8532

Trend Micro House Call
TSPY_PATUN.SMHA
7.2.75

Trend Micro
TSPY_PATUN.SMHA
10.465.16

VIPRE Antivirus
Trojan-PWS.MSIL.Petun.a
52916

File size:
37 KB (37,888 bytes)

Product version:
1.0.0.0

Copyright:
google...

Original file name:
New Cheat Fapcf Crossfire 2016-2017.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\roaming\seeback.exe

File PE Metadata
Compilation timestamp:
10/4/2016 3:04:21 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

Entry address:
0xAAEE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.6374

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
35 KB (35,840 bytes)

Remove seeback.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.