home

freeocr.net-12517-dp.application

The file freeocr.net-12517-dp.application has been detected as malware by 1 anti-virus scanner. The file has been seen being downloaded from www.tourapplicationshost.com.
MD5:
0571e8a5ef4bcf5a260ad9af0309ee32

SHA-1:
5bd1125f82d2a7db1db7e195476f1d3eb668fbde

SHA-256:
232dc65ae5b29e6c26b6ce93228ab393dd75c1f7b8c95e281767e1556b43d523

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
11/16/2024 5:37:37 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
(M)
16.6.21.18

File size:
2.1 KB (2,115 bytes)

Common path:
C:\users\{user}\downloads\freeocr.net-12517-dp.application

The file freeocr.net-12517-dp.application has been seen being distributed by the following URL.

http://www.tourapplicationshost.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

Remove freeocr.net-12517-dp.application - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.