home

taskmgr.exe

The executable taskmgr.exe has been detected as malware by 1 anti-virus scanner. This is a setup program which is used to install the application. The file has been seen being downloaded from callfor.info.
MD5:
e8c27031d82e793ce693b742dd1df34e

SHA-1:
9212cef7f241fd431338b9c5388705bcc2c53701

SHA-256:
36f3abed8ddf56715fbf88d81462fe4214fa42222e5afd020b31e51650926343

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
11/16/2024 12:51:18 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Threat.Win.Reputation.IMP
16.2.1.19

File size:
4.2 MB (4,451,840 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\windows\sys\taskmgr.exe

File PE Metadata
Compilation timestamp:
6/27/2014 8:23:30 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
2.23

CTPH (ssdeep):
49152:eKc0MsJkoq4eyCy1PcSxX5dap2eoScfEoCMj5xlvHnvGAsrww5k7nA6oYV86ZpZr:UHy7PJ5w5fSz1Zv

Entry address:
0x14C0

Entry point:
48, 83, EC, 28, C7, 05, 22, 1B, 44, 00, 00, 00, 00, 00, E8, 5D, 8D, 26, 00, E8, A8, FC, FF, FF, 90, 90, 48, 83, C4, 28, C3, 90, C3, 90, 66, 66, 66, 66, 66, 66, 2E, 0F, 1F, 84, 00, 00, 00, 00, 00, 66, 66, 66, 66, 66, 66, 2E, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 83, EC, 38, 48, 8B, 05, BD, DB, 43, 00, 48, 8D, 54, 24, 2F, 48, 8D, 48, E8, E8, 27, 63, 30, 00, 90, 48, 83, C4, 38, C3, 90, 48, 83, EC, 38, 48, 8B, 05, 95, DB, 43, 00, 48, 8D, 54, 24, 2F, 48, 8D, 48, E8, E8, 07, 63, 30, 00, 90, 48, 83, C4, 38, C3, 90...
 
[+]

Code size:
3.3 MB (3,489,280 bytes)

The file taskmgr.exe has been seen being distributed by the following URL.

http://callfor.info/taskmgr.exe

Remove taskmgr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.