home

(nocd patch) alpharom 3.2 ジャンゴ型汎用 rev2.exe

The application (nocd patch) alpharom 3.2 ジャンゴ型汎用 rev2.exe has been detected as a potentially unwanted program by 13 anti-malware scanners. Additionally, the file is typically installed by a number of programs including BALDR SKY Dive2 by GIGA Deutsch and BALDRSKYDiveX by GIGA Deutsch. The file has been seen being downloaded from cfile22.uf.tistory.com.
MD5:
bbd869d4f68976c363fbd9d491f15a11

SHA-1:
519c6bd2aa8c451be66babc584a35c43b4d3831f

SHA-256:
7dfa61daeb425608a801c7df10de09d67fde0a2f82d1af9412dd1011c4f5080c

Scanner detections:
13 / 68

Status:
Potentially unwanted

Analysis date:
11/14/2024 2:56:06 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Generic.10457598
985

avast!
Win32:MiniMal [Trj]
2014.9-140525

Bitdefender
Trojan.Generic.10457598
1.0.20.725

Bkav FE
W32.Clod4dd.Trojan
1.3.0.4959

Emsisoft Anti-Malware
Trojan.Generic.10457598
8.14.05.25.05

F-Secure
Trojan.Generic.10457598
11.2014-25-05_1

G Data
Trojan.Generic.10457598
14.5.24

IKARUS anti.virus
not-a-virus.Patch.SafeDisc
t3scan.1.6.1.0

Malwarebytes
Riskware.Crk
v2014.05.25.05

McAfee
Artemis!BBD869D4F689
5600.7119

MicroWorld eScan
Trojan.Generic.10457598
15.0.0.435

nProtect
Trojan.Generic.10457598
14.05.02.01

ViRobot
Patcher.AlphaROM.2048
2011.4.7.4223

File size:
2 KB (2,048 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
4/26/2009 12:24:28 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

CTPH (ssdeep):
48:69J+Q8L4itRoqHie0qK9hAIrZhHf3udoB7A:+Ut4ijiQK9hAIrDf3uq

Entry address:
0x115E

Entry point:
33, ED, 8B, DD, 68, 12, 11, 40, 00, E8, 88, 02, 00, 00, 85, C0, 0F, 84, 3D, 02, 00, 00, 55, 68, 80, 00, 00, 00, 6A, 03, 55, 6A, 01, 68, 00, 00, 00, C0, 68, 00, 20, 40, 00, E8, 36, 02, 00, 00, 03, D8, 0F, 84, 04, 02, 00, 00, 0F, 88, FE, 01, 00, 00, BF, 64, 22, 40, 00, 50, 8B, C4, 55, 50, 68, 00, 10, 00, 00, 57, 53, E8, 1E, 02, 00, 00, 58, 03, 7F, 3C, B9, 00, 01, 00, 00, B8, 2E, 73, 65, 74, F2, AF, 85, C9, 0F, 84, C9, 01, 00, 00, 81, 3F, 74, 65, 63, 00, 0F, 85, BD, 01, 00, 00, 8B, 47, 10, A3, 5C, 22, 40, 00...
 
[+]

Entropy:
4.6807

Code size:
1.5 KB (1,536 bytes)

The file (nocd patch) alpharom 3.2 ジャンゴ型汎用 rev2.exe has been discovered within the following programs.

BALDR SKY Dive2  by GIGA Deutsch
About 1% of users remove it
BALDRSKYDiveX  by GIGA Deutsch
About 2% of users remove it
 
Powered by Should I Remove It?

The file (nocd patch) alpharom 3.2 ジャンゴ型汎用 rev2.exe has been seen being distributed by the following URL.

http://cfile22.uf.tistory.com/.../171D681B4AF6FAE7082818

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.