home

malware132

PowerDVD RC Service

Andrea Renzo Torello Viera

The file malware132 has been detected as malware by 15 anti-virus scanners.
Publisher:
CyberLink Corp.  (signed by Andrea Renzo Torello Viera)

Product:
PowerDVD RC Service

Version:
9.0.3401.1

MD5:
dea2dea73c247b4f260425663e022392

SHA-1:
9eb85b4d6c857771666fb4983d17a5acd71d9e96

SHA-256:
147ddf77462cd2f4faf9bbab7eebc79ff883a3351dd014d4543c53051cf6c71b

Scanner detections:
15 / 68

Status:
Malware

Analysis date:
1/9/2025 10:13:25 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Graftor.211499
573

Agnitum Outpost
Trojan.Kryptik
7.1.1

AhnLab V3 Security
Backdoor/Win32.RCSpy
2015.07.12

Arcabit
Trojan.Jaiko.837
1.0.0.425

avast!
Win32:RCSpy-A [Trj]
2014.9-150711

AVG
Agent_r
2016.0.3051

Bitdefender
Gen:Variant.Graftor.211499
1.0.20.960

Emsisoft Anti-Malware
Gen:Variant.Graftor.211499
8.15.07.11.08

ESET NOD32
Win32/Kryptik.BFLS (variant)
9.11924

F-Secure
Gen:Variant.Jaiko.837
11.2015-11-07_7

G Data
Gen:Variant.Graftor.211499
15.7.25

Kaspersky
HEUR:Backdoor.Win32.Generic
14.0.0.1751

MicroWorld eScan
Gen:Variant.Graftor.211499
16.0.0.576

NANO AntiVirus
Trojan.Win32.Agent.cuxkrk
0.30.24.2487

Sophos
Troj/FSBSpy-C
4.98

File size:
476 KB (487,432 bytes)

Product version:
9.0.3401.1

Copyright:
Copyright (c) CyberLink Corp. 1997-2008

Language:
Language Neutral

Digital Signature
Signed by:
Andrea Renzo Torello Viera

Authority:
DigiCert Inc

Valid from:
3/20/2013 1:00:00 AM

Valid to:
3/24/2014 1:00:00 PM

Subject:
CN=Andrea Renzo Torello Viera, O=Andrea Renzo Torello Viera, L=SEVESO, C=IT

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
05D78ECAA3738A087043D6D6F019A3D9

File PE Metadata
Compilation timestamp:
5/20/2013 5:50:45 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:sLMN0R2WAn8ZwjBSMJmc6kbLuCsMuDCyTb8e:saFB6guDCyTb8e

Entry address:
0x17C0

Entry point:
55, 8B, EC, 81, EC, 20, 01, 00, 00, 8D, 85, 20, FF, FF, FF, 50, E8, BB, FA, FF, FF, 8D, 8D, 20, FF, FF, FF, 51, E8, 23, F8, FF, FF, 89, 45, F4, 8D, 95, 2C, FF, FF, FF, 52, 8B, 45, F4, 50, E8, 27, F8, FF, FF, 89, 45, F8, 8D, 8D, 4C, FF, FF, FF, 51, 8B, 55, F4, 52, E8, 14, F8, FF, FF, 89, 85, 0C, FF, FF, FF, 6A, 1C, 8D, 85, E4, FE, FF, FF, 50, E8, A4, F8, FF, FF, 50, FF, 95, 0C, FF, FF, FF, 8B, 8D, F0, FE, FF, FF, 03, 8D, E4, FE, FF, FF, 89, 4D, FC, 6A, 1C, 8D, 95, E4, FE, FF, FF, 52, 8B, 45, FC, 50, FF, 95...
 
[+]

Entropy:
5.3578

Developed / compiled with:
Microsoft Visual C++

Code size:
163.5 KB (167,424 bytes)

Remove malware132 - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.