home

1.exe

The executable 1.exe has been detected as malware by 22 anti-virus scanners.
MD5:
570380cd3abc2bc3a02aaa280d09e7d7

SHA-1:
f5a7775b5fc2665dbb01c2e25cac880ba714274c

SHA-256:
0ac8610c5f963abbdfe0b6b2d9fc90fe624a72309dfb2f2360ee9433f916f46b

Scanner detections:
22 / 68

Status:
Malware

Analysis date:
4/1/2025 7:54:36 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Zusy.23121.5
7.11.83.106

avast!
Win32:Malware-gen
2014.9-170315

AVG
MSIL
2018.0.2438

Bitdefender
Gen:Variant.Zusy.23121
1.0.20.370

Comodo Security
UnclassifiedMalware
16389

Dr.Web
Trojan.DownLoader7.29744
9.0.1.074

Emsisoft Anti-Malware
Gen:Variant.Zusy.23121
8.17.03.15.08

ESET NOD32
MSIL/Injector.GP (variant)
11.8422

Fortinet FortiGate
MSIL/Dropper.ORB!tr
3/15/2017

F-Secure
Gen:Variant.Zusy.23121
11.2017-15-03_4

G Data
Gen:Variant.Zusy.23121
17.3.22

IKARUS anti.virus
Win32.SuspectCrc
t3scan.2.0.3.0

Kaspersky
HEUR:Trojan.Win32.Generic
14.0.0.-1314

Malwarebytes
Trojan.MSIL
v2017.03.15.08

McAfee
RDN/Generic.dx!ch3
5600.6094

Microsoft Security Essentials
Trojan:Win32/Sisron
1.163.1557.0

MicroWorld eScan
Gen:Variant.Zusy.23121
18.0.0.222

Norman
Troj_Generic.LSFLF
11.20170315

Panda Antivirus
Trj/CI.A
17.03.15.08

Sophos
Mal/Generic-S
4.89

Trend Micro House Call
TROJ_GEN.RCBB1F5
7.2.74

VIPRE Antivirus
Trojan.Win32.Generic
18498

File size:
35 KB (35,840 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\windows\syswow64\1.exe

File PE Metadata
Compilation timestamp:
5/23/2013 3:43:47 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

Entry address:
0x9B1E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.1794

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
31 KB (31,744 bytes)

Remove 1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.