home

245f.tmp

The file 245f.tmp has been detected as malware by 35 anti-virus scanners.
MD5:
35db79514509b8424f96c08fd9fcec1b

SHA-1:
b2bed22ef2b3b8ec9e2be79757c48443b7e09869

Scanner detections:
35 / 68

Status:
Malware

Analysis date:
4/1/2025 7:59:32 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.PWS.5
-40

Agnitum Outpost
Trojan.Pakes
7.1.1

Avira AntiVirus
TR/Lukicsel.E.53
7.11.131.98

avast!
Win32:Dropper-KRC [Drp]
2014.9-170315

AVG
Generic28
2018.0.2438

Baidu Antivirus
Trojan.Win32.Pakes
4.0.3.17315

Bitdefender
Gen:Variant.PWS.5
1.0.20.370

Bkav FE
W32.Clodb57.Trojan
1.3.0.4924

Comodo Security
UnclassifiedMalware
17779

Dr.Web
BackDoor.Lukicsel.9
9.0.1.074

Emsisoft Anti-Malware
Gen:Variant.PWS
8.17.03.15.05

ESET NOD32
Win32/Lukicsel (variant)
11.9419

Fortinet FortiGate
W32/Pakes.QKK!tr
3/15/2017

F-Prot
W32/SuspPack.ET.gen
v6.4.7.1.166

F-Secure
Gen:Variant.PWS.5
11.2017-15-03_4

G Data
Gen:Variant.PWS
17.3.24

IKARUS anti.virus
Trojan.Win32.Pakes
t3scan.2.2.29

K7 AntiVirus
Trojan
13.175.11164

Kaspersky
Trojan.Win32.Pakes
14.0.0.-1314

Malwarebytes
Backdoor.Lukicsel
v2017.03.15.05

McAfee
PWS-Zbot.gen.ajz
5600.6094

Microsoft Security Essentials
Trojan:Win32/Lukicsel.L
1.165.247.01

MicroWorld eScan
Gen:Variant.PWS.5
18.0.0.222

NANO AntiVirus
Trojan.Win32.Drop.dhdfw
0.28.0.57630

Norman
Pakes.ECE
11.20170315

Panda Antivirus
Bck/Hijack.I
17.03.15.05

Qihoo 360 Security
Win32/Trojan.PWS.2cc
1.0.0.1015

Quick Heal
Trojan.Pakes.qkk
3.17.12.00

Rising Antivirus
PE:Trojan.Win32.Generic.12C15483!314659971
23.00.65.17313

Sophos
Mal/EncPk-AEN
4.97

Trend Micro House Call
HS_FAKEAV.SM06
7.2.74

Trend Micro
HS_FAKEAV.SM06
10.465.15

Vba32 AntiVirus
Trojan.Pakes
3.12.24.3

VIPRE Antivirus
Trojan.Win32.Lukicsel.w
26426

ViRobot
Trojan.Win32.Pakes.369152.A
2011.4.7.4223

File size:
360.5 KB (369,152 bytes)

Common path:
C:\Documents and Settings\{user}\Local settings\temp\245f.tmp

File PE Metadata
Compilation timestamp:
6/20/1992 7:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0x60AC

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, 5C, 60, 40, 00, E8, AB, DA, FF, FF, 50, 53, 56, 52, 51, 57, B8, 69, 0D, 00, 00, 05, 70, 7A, 00, 00, 50, 2D, AD, 3A, 00, 00, 50, 6A, 00, 05, 3F, 75, 06, 00, 50, E8, 5B, DB, FF, FF, E8, 46, DB, FF, FF, D1, E0, 05, EF, 60, 40, 00, 50, C3, 6A, 00, E8, 26, DB, FF, FF, C3, 90, 90, 90, 90, 5F, 59, 5A, 5E, 5B, 58, 33, C0, A3, C0, C6, 45, 00, 33, C0, A3, CC, C6, 45, 00, 33, DB, E8, DE, C4, FF, FF, 81, FB, 7F, 01, 00, 00, 75, 07, E8, ED, F9, FF, FF, EB, 0E, B8, 90, 01, 00, 00, E8, 65...
 
[+]

Entropy:
7.9327

Developed / compiled with:
Microsoft Visual C++

Code size:
20.5 KB (20,992 bytes)

Remove 245f.tmp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.