home

2014.exe

The application 2014.exe has been detected as a potentially unwanted program by 3 anti-malware scanners. The file has been seen being downloaded from liversely.net.
MD5:
9e4ef1f0d9faf33697b45e3b8ecbd58d

SHA-1:
6ba86f256ece6e3b4754dc6bc97933e5f25a391d

SHA-256:
52d376714dc07d7a0e08d05007d8eddb55f90ba95862b26b1a860562b52e71cd

Scanner detections:
3 / 68

Status:
Potentially unwanted

Analysis date:
12/24/2024 12:32:08 PM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:MultiPlug-GA [PUP]
160503-1

AVG
Adware Generic_r.UH
2015.0.4604

Reason Heuristics
PUP.Bundler (M)
16.9.7.13

File size:
174.8 KB (178,991 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\2014.exe

File PE Metadata
Compilation timestamp:
9/9/2013 8:53:10 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
3072:wDxdrsrlRi2rWZde3BD/W1/fV7IOGL4zjZQ/jlGLnrXAfSFa97Y9EN3GTP:wtWRixe3Z/s/f242JGXX2SF8Y9EN2r

Entry address:
0x14122

Entry point:
E8, 84, 48, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, B0, 51, 43, 00, E8, E8, 0D, 00, 00, E8, 51, 4A, 00, 00, 0F, B7, F0, 6A, 02, E8, 17, 48, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, D5, 06, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
7.3745

Code size:
113 KB (115,712 bytes)

The file 2014.exe has been seen being distributed by the following URL.

http://liversely.net/87d091613dfb090bd4263ac5481f7fbb/tube10/dl.php?id=1412242405797275868&r=http://newpoints.info/v2381/lp/?q=s6Rrn1FyPAgHR/XZTVEzHc2dT/zwrS07Jgm0o44OTW7SqwDJ7eKdcjqs3qbrKfLSwuDz/xcmfYwH7DuUQCesKVy1zc2N7tvSQnY2lJybQ3EIoNGyuCg9 9KHv1z/nObn2Inc2 b4 g8zZ9xSxFI274vKGVvKgZI2kJFNwdRCo K47eKd2wJ3zG/LOAOeG39RP n9ANBTAKJjC6zYtcR/WTDcHg7Rx6kYI2b0dAgbIP8K8t31HC7IQ4MB/j1ne8V7DTx8HvjfuSpfRnXQE78LP9KhX8 qprgLfgjWxJRbv9lF3GP1c3erVuI2dQVoCuEMuwYlKS6Y8fS07cc4aVjvPX2HyFoDQ/n uLZYrpHN00tLMUHMGTChaESxmc6z9rnEi4DUvTHO0Pz/jRHzjUpRwDvZRHGFM2MurSkA1Gc5ppeQgZI23apHxduvXe7Tw3tsrYXHHcxY0r WuxNigO5RJgm0p1mgPrtJEN3phILfDj5CGZkpy0CglNZKwup5AXVuy/vplA4QVpkLWm4K0E1o3xn3fuy26D7usL8JzmqPTa6asTKhXl1nit7tJ 1IZWY0O9bf4JxRVQOE0gmryLCDoR48w4dhaUrDrgW3zDpX0kzno3NuAQ0GeMwCG6i0J Tm9fuTG8KTq4WPS09ncJsX7B1p3Af pDlApuGEYgxR1WZgGbgiPUvJ6LCtFIHIVXQCvXdVcOT1Wu5IT/zw3jsTzIO2FqJVoDRot7dEQU duzyDDcAFdhl/4HZpVqY /.../MBXlqf7Gn38x1zADao9

Remove 2014.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.