home

[void elsword] tool 2015-.exe

WindowsApplication1

The executable [void elsword] tool 2015-.exe has been detected as malware by 13 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from download1488.mediafire.com and multiple other hosts.
Product:
WindowsApplication1

Version:
1.0.0.0

MD5:
c10236ad9c1a9efeb6259eec7b61b360

SHA-1:
df567c75374419215b6125fb033188650d311608

SHA-256:
9861af386f171208109ed0527ab6c1e7f7313dea6dabc74aa581fed5f3785715

Scanner detections:
13 / 68

Status:
Malware

Analysis date:
11/27/2024 3:36:38 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Generic.14680677
456

Agnitum Outpost
TrojanSpy.Agent
7.1.1

Avira AntiVirus
TR/Spy.Gen
8.3.1.6

Arcabit
Trojan.Generic.DE00265
1.0.0.425

Bitdefender
Trojan.Generic.14680677
1.0.20.1545

Emsisoft Anti-Malware
Trojan.Generic.14680677
8.15.11.05.05

F-Secure
Trojan.Generic.14680677
11.2015-05-11_5

G Data
Trojan.Generic.14680677
15.11.25

IKARUS anti.virus
Trojan.Spy
t3scan.1.9.5.0

MicroWorld eScan
Trojan.Generic.14680677
16.0.0.927

nProtect
Trojan.Generic.14680677
15.07.30.01

Panda Antivirus
Trj/CI.A
15.11.05.05

Qihoo 360 Security
HEUR/QVM03.0.Malware.Gen
1.0.0.1015

File size:
110.5 KB (113,152 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2015

Original file name:
[VOID Elsword] Hack 2015~.exe

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
1/24/2015 3:36:36 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:DwgKiKbABvieClaBe2nmnEXdCWaqpHW+Qdy+xpRNr9P9UlWl2fNqddIj8k:vKfk9iFkxm42xyCpzr9P9vl2wddIj8k

Entry address:
0x19C7E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
95.5 KB (97,792 bytes)

The file [void elsword] tool 2015-.exe has been seen being distributed by the following 3 URLs.

http://download1488.mediafire.com/x0el7y997acg/.../[VOID Elsword] Tool 2015~.exe

http://download1488.mediafire.com/djlnscnag6eg/.../[VOID Elsword] Tool 2015~.exe

http://download1488.mediafire.com/2y76a882tyqg/.../[VOID Elsword] Tool 2015~.exe

Remove [void elsword] tool 2015-.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.