home

wallpaper.exe

Launcher

Todo En Programas

Publisher:
Todo En Programas

Product:
Launcher

Version:
1.00

MD5:
589cd14749c13f2cf2028dfa5c9eee6f

SHA-1:
2b279e2ae7b6b863d87f54dcaa5579f9689df892

SHA-256:
16658edd95b668782910e2e7e9e392af7ec3817344c387e3b1d3f096f41d8d44

Scanner detections:
4 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
2/25/2025 11:28:50 AM UTC  (today)

Scan engine
Detection
Engine version

Emsisoft Anti-Malware
Gen:Trojan.Heur.VP.bm0@aiPZDpP
11.5.0.6191

F-Prot
W32/VB-Downloader-Clueless-base
4.6.5.141

F-Secure
Trojan.Heur.VP.bm0@aiPZDpP
5.15.21

Norman
Gen:Trojan.Heur.VP.bm0@aiPZDpP
02.04.2016 17:35:19

File size:
20 KB (20,480 bytes)

Product version:
1.00

Original file name:
wallpaper v3.exe

File type:
Executable application (Win32 EXE)

Language:
Spanish

Common path:
C:\ProgramData\microsoft\windows\start menu\programs\startup\wallpaper.exe

File PE Metadata
Compilation timestamp:
6/2/2015 10:44:45 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
192:/TOvi+TN/AOXbSOQrkG715s5/D30SNewz:/Tji/XXbSrkO85/D30Swwz

Entry address:
0x12B4

Entry point:
68, 98, 13, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, BC, E9, 41, 33, 2A, AB, 0B, 46, AF, 1B, 94, 3A, 0D, 2E, 77, 62, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 4C, 61, 75, 6E, 63, 68, 65, 72, 00, 75, 6E, 63, 68, 65, 72, 5C, 00, 00, 00, 00, 06, 00, 00, 00, A0, 1D, 40, 00, 07, 00, 00, 00, 24, 19, 40, 00, 07, 00, 00, 00, DC, 18, 40, 00, 07, 00, 00, 00, 98, 18, 40, 00, 07, 00, 00, 00, 50, 18, 40, 00, 07, 00, 00, 00, D4, 17, 40, 00...
 
[+]

Entropy:
2.6787

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
8 KB (8,192 bytes)

All Users Start Menu Item
Name:
wallpaper.exe


The file wallpaper.exe has been seen being distributed by the following 2 URLs.

http://intranet.lafabril.com.ec/.../wallpaper.exe

https://intranet.lafabril.com.ec/.../wallpaper.exe

Scan wallpaper.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.