home

6bce.tmp

Driven

Purple passage - www.Driven.com

The file 6bce.tmp, “Belt comfortable create July pan review upward” has been detected as a potentially unwanted program by 24 anti-malware scanners.
Publisher:
Purple passage - www.Driven.com

Product:
Driven

Description:
Belt comfortable create July pan review upward

Version:
8.0.0.2

MD5:
3ec8a018e070fa1c15b7cbbf8d6d1a45

SHA-1:
b2c30ec74fa5e850be4931e41a9b717389532456

SHA-256:
b53740225de8c75fe521fd967ffcf4063c5df630715895cd4f40ea48440ba9d1

Scanner detections:
24 / 68

Status:
Potentially unwanted

Analysis date:
11/29/2024 4:44:40 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.GenericKD.2218441
-40

AhnLab V3 Security
Worm/Win32.Ngrbot
2015.03.14

Avira AntiVirus
TR/Crypt.ZPACK.125775
7.11.217.28

avast!
Win32:Malware-gen
2014.9-170316

AVG
Crypt3
2018.0.2438

Baidu Antivirus
Adware.Win32.iBryte
4.0.3.17316

Bitdefender
Trojan.GenericKD.2218441
1.0.20.375

Bkav FE
HW32.Packed
1.3.0.6379

Emsisoft Anti-Malware
Trojan.GenericKD.2218441
8.17.03.16.04

ESET NOD32
Win32/Kryptik.DBOT (variant)
11.11319

Fortinet FortiGate
W32/Kryptik.DBOT!tr
3/16/2017

F-Secure
Trojan.GenericKD.2218441
11.2017-16-03_5

G Data
Trojan.GenericKD.2218441
17.3.25

IKARUS anti.virus
Trojan.Win32.Crypt
t3scan.1.8.6.0

Kaspersky
Backdoor.Win32.Emotet
14.0.0.-1316

Malwarebytes
Trojan.Agent.DED
v2017.03.16.04

McAfee
Generic-FAVZ!3EC8A018E070
5600.6094

Microsoft Security Essentials
Trojan:Win32/Dynamer!ac
1.1.11400.0

MicroWorld eScan
Trojan.GenericKD.2218441
18.0.0.225

Panda Antivirus
Trj/CI.A
17.03.16.04

Qihoo 360 Security
HEUR/QVM10.1.Malware.Gen
1.0.0.1015

Sophos
Mal/Wonton-AU
4.98

SUPERAntiSpyware
Trojan.Agent/Gen-Dropper
8533

Trend Micro House Call
Suspicious_GEN.F47V0313
7.2.75

File size:
816.5 KB (836,096 bytes)

Product version:
8.0

Copyright:
Copyright (C) Driven 2004-2013

Language:
Arabisch (Saudi-Arabien)

Common path:
C:\users\{user}\appdata\local\temp\6bce.tmp

File PE Metadata
Compilation timestamp:
3/12/2015 11:42:03 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0xCC82

Entry point:
E8, 89, A4, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 14, 56, 57, FF, 75, 08, 8D, 4D, EC, E8, 54, EE, FF, FF, 8B, 45, 10, 8B, 75, 0C, 33, FF, 3B, C7, 74, 02, 89, 30, 3B, F7, 75, 2C, E8, 26, 20, 00, 00, 57, 57, 57, 57, 57, C7, 00, 16, 00, 00, 00, E8, 86, 12, 00, 00, 83, C4, 14, 80, 7D, F8, 00, 74, 07, 8B, 45, F4, 83, 60, 70, FD, 33, C0, E9, D8, 01, 00, 00, 39, 7D, 14, 74, 0C, 83, 7D, 14, 02, 7C, C9, 83, 7D, 14, 24, 7F, C3, 8B, 4D, EC, 53, 8A, 1E, 89, 7D, FC, 8D, 7E, 01, 83, B9, AC, 00, 00, 00...
 
[+]

Code size:
133 KB (136,192 bytes)

Remove 6bce.tmp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.