home

lokalizator.exe

SystemLokalizacjiTelefonow

This is a setup program which is used to install the application. The file has been seen being downloaded from www.phone-tracker.pl.
Product:
SystemLokalizacjiTelefonow

Version:
1.0.0.0

MD5:
450f9a3fca39cf415e0e6f99f3e71270

SHA-1:
d522a3e7774323a2714cafd81214c75620619c35

SHA-256:
6a99882bbe74e81769bf9ecfdd790b0f5be866151b2ef7061bed116b89b7ef51

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/29/2024 3:48:33 AM UTC  (today)

Scan engine
Detection
Engine version

IKARUS anti.virus
Trojan.SuspectCRC
t3scan.1.9.5.0

File size:
4 MB (4,241,920 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2015

Original file name:
SystemLokalizacjiTelefonow.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\lokalizator.exe

File PE Metadata
Compilation timestamp:
3/5/2015 11:27:30 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:iLkJhO4V9pFf1+4YsCVxkTZ/ywiQeHnfqDSsK0rNHucxTT2OcpfSUhnLK:nJEmFf3JCEmQeHGxKmZTT2Dh

Entry address:
0x3B267A

Entry point:
FF, 25, 88, 26, 7B, 00, 00, 00, 00, 00, 00, 00, 00, 00, 5C, 26, 3B, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Code size:
3.7 MB (3,868,672 bytes)

The file lokalizator.exe has been seen being distributed by the following URL.

http://www.phone-tracker.pl/lokalizator.exe

Scan lokalizator.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.