home

multi usbguard 1.0 [multilive.net].exe

Multilive.net

This is a setup and installation application. The file has been seen being downloaded from go.multilive.net.
Publisher:
Multilive.net

Description:
Multi USBGuard (Anti Virus) v1.0.0 Installation

Version:
v1.0.0

MD5:
20e0687263b6aa0b2c098d0fc1756045

SHA-1:
e74f66ab320f63b95663081453eef5b47b513dd4

SHA-256:
16a137f2740fc5efcc0bd29671a2fea3472c6bb680050557b03fbdb147b51903

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
12/25/2024 6:29:57 PM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
Trojan.Delf-2824
0.98/21511

K7 AntiVirus
Spyware
13.203.15861

File size:
926.7 KB (948,965 bytes)

Copyright:
Multilive.net

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\multi usbguard 1.0 [multilive.net].exe

File PE Metadata
Compilation timestamp:
6/20/1992 3:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:ctWNcS+56SK0GMQl3ig9wQiJgUT09vE/R9N9RmqLI4aiBkK/11bgAyBWQfCXokqx:csP58Qt9YRhLI49kUfH4f0okqx

Entry address:
0x1609C

Entry point:
55, 8B, EC, 83, C4, F0, B8, F4, 5F, 41, 00, E8, 10, C8, FE, FF, B8, FC, 60, 41, 00, E8, 1E, 2C, FF, FF, 8B, 15, 54, 76, 41, 00, 89, 02, 8B, 15, 54, 76, 41, 00, 8B, 12, A1, 58, 76, 41, 00, E8, FC, D9, FF, FF, 8B, 15, 54, 76, 41, 00, 8B, 12, A1, 04, 76, 41, 00, E8, BA, 76, FF, FF, A1, 54, 76, 41, 00, E8, 2C, 1F, FF, FF, E8, 6B, B8, FE, FF, 00, 00, 00, FF, FF, FF, FF, 01, 00, 00, 00, 2A, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.6416

Developed / compiled with:
Microsoft Visual C++

Code size:
84.5 KB (86,528 bytes)

The file multi usbguard 1.0 [multilive.net].exe has been seen being distributed by the following URL.

http://go.multilive.net/.../Multi USBGuard 1.0 [multilive.net].exe

Scan multi usbguard 1.0 [multilive.net].exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.