home

mjklopoklqz.exe

UNINFO SISTEMAS LTDA ME

The executable mjklopoklqz.exe has been detected as malware by 26 anti-virus scanners.
Publisher:
UNINFO SISTEMAS LTDA ME  (signed and verified)

Version:
5.0.0.0

MD5:
c1c14642fd297fc0701fda550ea1891a

SHA-1:
53e10464076bf3db135f4b2892521b3ba5acac9d

SHA-256:
b74938d9b21767eff501fd6382ef433a83519460a8b5f6530a88bdd90d814ea1

Scanner detections:
26 / 68

Status:
Malware

Analysis date:
11/15/2024 7:22:48 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Generic.15472721
387

Agnitum Outpost
Trojan.DL.Banload
7.1.1

AhnLab V3 Security
Trojan/Win32.Banker
2015.12.30

Avira AntiVirus
TR/Spy.Banker.Gen
8.3.2.4

Arcabit
Trojan.Generic.DEC1851
1.0.0.637

avast!
Win32:Banker-MQI [Trj]
2014.9-160113

AVG
PSW.Banker7
2017.0.2865

Bitdefender
Trojan.Generic.15472721
1.0.20.65

Emsisoft Anti-Malware
Trojan.Generic.15472721
8.16.01.13.12

ESET NOD32
Win32/Spy.Banker.ACDG (variant)
10.12792

Fortinet FortiGate
W32/Banker.ACDG!tr.spy
1/13/2016

F-Secure
Trojan.Generic.15472721
11.2016-13-01_4

G Data
Trojan.Generic.15472721
16.1.25

IKARUS anti.virus
Trojan-Spy.Agent
t3scan.1.9.5.0

K7 AntiVirus
Spyware
13.212.18254

Malwarebytes
Trojan.Symmi
v2016.01.13.12

McAfee
Artemis!C1C14642FD29
5600.6521

Microsoft Security Essentials
TrojanSpy:Win32/Banker!rfn
1.1.12400.0

MicroWorld eScan
Trojan.Generic.15472721
17.0.0.39

nProtect
Trojan.Generic.15472721
15.12.29.01

Panda Antivirus
Trj/CI.A
16.01.13.12

Qihoo 360 Security
HEUR/QVM41.1.Malware.Gen
1.0.0.1077

Rising Antivirus
PE:Malware.Generic/QRS!1.9E2D [F]
23.00.65.16111

Sophos
Mal/Generic-S
4.98

Trend Micro
TROJ_GEN.R047C0DLJ15
10.465.13

VIPRE Antivirus
Trojan.Win32.Generic
46134

File size:
12.8 MB (13,405,192 bytes)

Product version:
5.0.0.0

File type:
Executable application (Win32 EXE)

Language:
Maltês (Malta)

Common path:
C:\users\{user}\appdata\roaming\microsoft\windows\start menu\programs\startup\mjklopoklqz.exe

Digital Signature
Signed by:
UNINFO SISTEMAS LTDA ME

Authority:
thawte, Inc.

Valid from:
12/7/2015 10:00:00 PM

Valid to:
9/24/2016 8:59:59 PM

Subject:
CN=UNINFO SISTEMAS LTDA ME, O=UNINFO SISTEMAS LTDA ME, L=chapeco, S=santa catarina, C=BR

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
0BDA51D61C80F17A49E30410A43ACF35

File PE Metadata
Compilation timestamp:
12/15/2015 11:18:18 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:tdoABdp/MRjUS2PzXJPJ3jJgL7baTl0OXKo/3hCideGZu/+5xlllWP06cfVKg+7I:tfv/MK5VJXF3hC6ZZlD4rqWyzsXpJcW

Entry address:
0x34A96C

Entry point:
55, 8B, EC, 83, C4, F0, B8, AC, D3, 73, 00, E8, 50, 44, CC, FF, A1, BC, A1, 75, 00, 8B, 00, E8, 14, 0F, E7, FF, A1, BC, A1, 75, 00, 8B, 00, C6, 40, 6F, 00, 8B, 0D, 60, 9D, 75, 00, A1, BC, A1, 75, 00, 8B, 00, 8B, 15, 18, 8A, 72, 00, E8, 09, 0F, E7, FF, A1, BC, A1, 75, 00, 8B, 00, E8, 59, 10, E7, FF, E8, 98, F9, CB, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
3.3 MB (3,446,784 bytes)

User Start Menu Item
Name:
mjklopoklqz.exe


Remove mjklopoklqz.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.