home

{86f4efcb-2acc-46ab-ae75-7f6ddbb6c32d}

ZverCD

The file {86f4efcb-2acc-46ab-ae75-7f6ddbb6c32d}, “Total Commander 7.50 Installation ” has been detected as malware by 7 anti-virus scanners. The file has been seen being downloaded from fileshare7340.depositfiles.com.
Publisher:
ZverCD

Description:
Total Commander 7.50 Installation

Version:
7.50

MD5:
2028771288e6ea027e6e208a4594c949

SHA-1:
fbab6c4da35a1c72c8523f6cbce54ce71832bd6b

SHA-256:
9726500d22e4bebc235b8e2c5952f1013b030eb228fdf65c83e44b463210381c

Scanner detections:
7 / 68

Status:
Malware

Analysis date:
12/26/2024 2:10:47 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
Worm/Generic
2016.0.2901

Bkav FE
W32.Clodc03.Trojan
1.3.0.4923

Comodo Security
UnclassifiedMalware
17675

ESET NOD32
Detection.Undefined
7.0.302.0

Fortinet FortiGate
Riskware/Sim
12/8/2015

McAfee
Artemis!2028771288E6
5600.6557

Norman
Suspicious_Gen4.DGUZW
11.20151208

File size:
9.8 MB (10,301,706 bytes)

Copyright:
ZverCD

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:YKle1W3kH6VRmE6Sv6nS3xK7LWzCOlZVGtEeRLLnqoZgg2BY+SU371qn0OdgxNV3:dle1WUaiE6Sv6nSha+COl6tE0vngXrS8

Entry address:
0x17DE0

Entry point:
55, 8B, EC, 83, C4, F0, B8, 18, 7D, 41, 00, E8, F0, AA, FE, FF, B8, 40, 7E, 41, 00, E8, F6, 17, FF, FF, 8B, 15, AC, 86, 41, 00, 89, 02, 8B, 15, AC, 86, 41, 00, 8B, 12, A1, B0, 86, 41, 00, E8, 80, D5, FF, FF, 8B, 15, AC, 86, 41, 00, 8B, 12, A1, 50, 86, 41, 00, E8, 3A, 71, FF, FF, A1, AC, 86, 41, 00, E8, E8, 09, FF, FF, E8, 0B, 9B, FE, FF, 00, 00, 00, FF, FF, FF, FF, 01, 00, 00, 00, 2A, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
92 KB (94,208 bytes)

The file {86f4efcb-2acc-46ab-ae75-7f6ddbb6c32d} has been seen being distributed by the following URL.

http://fileshare7340.depositfiles.com/auth-135428382796104b85660bba5d0ffefb-83.149.47.0-727256272-102418157-guest/.../TotalCommander.exe

Remove {86f4efcb-2acc-46ab-ae75-7f6ddbb6c32d} - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.