» trove hack.exe
Overview
Analysis
File Details

trove hack.exe

Adobe Updater AAM Launcher

Planeta ITOOO

The executable trove hack.exe has been detected as malware by 1 anti-virus scanner.

File name:

trove hack.exe

Publisher:

A dobe Systems Incorporated (signed by Planeta ITOOO)

Product:

Adobe Updater AAM Launcher

Version:

1\,0\,0\,67

MD5:

044965a2c133406cf78ec118047dde20

SHA-1:

911b4f5bdd5bd9f0bdeb810879c68254b9105c4d

SHA-256:

7f21f2676e85ec41c1b87296b2e829ae87434924046ea60a15b9d84282bf0aae

Scanner detections:

1 / 68

Status:

Malware

Analysis date:

11/15/2024 5:47:28 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP (M)

17.3.10.5

File size:

483.5 KB (495,096 bytes)

Product version:

1.0.0.67 (BuildVersion: 1.0; BuildDate: BUILDDATETIME)

Original file name:

aamlauncher.exe

File type:

Executable application (Win32 EXE)

Language:

English (India)

Common path:

C:\users\{user}\downloads\trove hack.exe

Digital Signature

Signed by:

Planeta ITOOO

Authority:

COMODO CA Limited

Valid from:

3/25/2016 7:00:00 AM

Valid to:

3/26/2017 6:59:59 AM

Subject:

CN="""Planeta IT""OOO", O="""Planeta IT""OOO", STREET=40 ul.Gorkogo, L=Vladimir, S=Vladimirskaya obl., PostalCode=600017, C=RU

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

7E4FCBC86A9FD9C16016F3E945A87C06

File PE Metadata

Compilation timestamp:

5/20/2016 7:45:16 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

Entry address:

0x1000

Entry point:

55, 8B, EC, 81, EC, A0, 07, 00, 00, 53, 56, 57, C6, 85, 01, FF, FF, FF, 3E, 68, 1B, 10, 40, 00, C3, 33, F2, 8D, 12, EB, 06, 81, EF, D9, 8B, DF, 12, 87, C9, 8B, 85, F0, FD, FF, FF, 03, 85, 08, FE, FF, FF, 89, 85, DC, FD, FF, FF, 6A, 00, FF, 15, E0, D0, 46, 00, 8B, 8D, 0C, FE, FF, FF, C1, E9, 36, 89, 8D, EC, FD, FF, FF, FF, 15, 64, D3, 46, 00, 8B, 95, E8, FD, FF, FF, 0F, AF, 95, F0, FD, FF, FF, 89, 95, EC, FD, FF, FF, FF, 15, 68, D3, 46, 00, 6A, 00, FF, 15, DC, D0, 46, 00, 8B, 85, FC, FD, FF, FF, 8B, 8D, EC... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

431.5 KB (441,856 bytes)

Remove trove hack.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.