home

detlef grundfeld 08.02.2017.com

Famatech Corp.

The file detlef grundfeld 08.02.2017.com has been detected as malware by 7 anti-virus scanners.
Publisher:
Famatech Corp.  (signed and verified)

MD5:
d9adafd80f0dd9cca241de5e7f15b086

SHA-1:
e1337bde9a320a3d15cbd37d078d5c63819971f3

SHA-256:
1e16199202fdbf72833c33eab10abb3319af04b86ef1b68d31343d64db46a4cf

Scanner detections:
7 / 68

Status:
Malware

Analysis date:
12/25/2024 4:22:17 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Crypt.ZPACK.kefye
8.3.3.4

avast!
Win32:Malware-gen
2014.9-170209

ESET NOD32
Win32/Kryptik.FOAC (variant)
11.14904

IKARUS anti.virus
Trojan.Inject
0.1.3.4

Kaspersky
Trojan.Win32.Nymaim
14.0.0.-1144

Rising Antivirus
Malware.XPACK-HIE/Heur!1.9C48 (classic)
23.00.65.17207

Trend Micro House Call
TROJ_GEN.F0D1H00B817
7.2.40

File size:
607.2 KB (621,760 bytes)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\detlef grundfeld 08.02.2017.com

Digital Signature
Signed by:
Famatech Corp.

Authority:
VeriSign, Inc.

Valid from:
8/29/2012 2:00:00 AM

Valid to:
10/20/2015 1:59:59 AM

Subject:
CN=Famatech Corp., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Famatech Corp., L=Road Town, S=Tortola, C=VG

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2FEE515AD7951C4A1D99C16E190BFEA3

File PE Metadata
Compilation timestamp:
8/9/2006 4:38:19 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.12

Entry address:
0x3360

Entry point:
68, 44, 01, 00, 00, 6A, 00, FF, 15, 38, A1, 40, 00, A3, 6B, F8, 40, 00, 50, FF, 15, 3C, A1, 40, 00, 2D, 44, 01, 00, 00, 0F, 85, D7, 00, 01, 00, 50, 55, 6A, 43, 8B, EC, 33, D2, 81, EC, 20, 02, 00, 00, 8B, 55, FB, 2B, 55, FB, 2B, 55, F8, 8B, 55, FB, 2B, 55, FB, 03, 55, F8, 03, 55, F8, 03, 55, F8, 03, 55, F8, 03, 55, F8, 03, 55, F8, 03, 55, F8, 03, 55, F8, 03, 55, F8, 03, 55, F8, 03, 55, F8, 03, 55, F8, 03, 55, F8, 03, 55, F8, 03, 55, F8, 03, 55, F8, 2B, 55, F8, BF, 08, 00, 00, 00, 6A, 00, 6A, 00, 6A, 00, 6A...
 
[+]

Code size:
32.5 KB (33,280 bytes)

Remove detlef grundfeld 08.02.2017.com - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.