home

wipe_rom easy a10 - a13.exe

MD5:
b2e2a3aefefb6d21f1098e9fccce3244

SHA-1:
faeff915d6f05e56f36693cdbbefaf702702f279

SHA-256:
3100ddcd495d62b59611d2946050676e08604e309b5e1b6980c7217736b05681

Scanner detections:
4 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/24/2024 12:10:42 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.OnGameT2KSULAE.Trojan
1.3.0.4959

Comodo Security
TrojWare.Win32.Spy.Zbot.BPOE
18250

Dr.Web
MULDROP.Trojan
9.0.1.0132

Zillya! Antivirus
Dropper.Agent.Win32.65367
2.0.0.1784

File size:
666.8 KB (682,771 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
2/3/2011 6:41:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:xYgFKpUEqkCPsBNkqQ5Cz9HJqnu/J1dMEoEzTpTduE:e6EqkCEBNkqQ5Cv+u/DdMEFTpTAE

Entry address:
0x294F4

Entry point:
55, 8B, EC, 6A, FF, 68, 38, 51, 45, 00, 68, 74, D4, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 4C, 11, 45, 00, 33, D2, 8A, D4, 89, 15, E0, 38, 47, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, DC, 38, 47, 00, C1, E1, 08, 03, CA, 89, 0D, D8, 38, 47, 00, C1, E8, 10, A3, D4, 38, 47, 00, 33, F6, 56, E8, BA, 3E, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 85, 3B, 00, 00, FF, 15, 48, 11, 45, 00, A3, 84, 68, 47, 00, E8...
 
[+]

Entropy:
6.9301

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
320 KB (327,680 bytes)

The file wipe_rom easy a10 - a13.exe has been seen being distributed by the following 21 URLs.

http://download629.mediafire.com/rhis9qvxg9wg/.../WIPE_ROM EASY A10 - A13.exe

http://download1956.mediafire.com/62qao9xja1xg/.../WIPE_ROM EASY A10 - A13.exe

http://download1651.mediafire.com/3wrp5nw4isog/.../WIPE_ROM EASY A10 - A13.exe

http://download1651.mediafire.com/l4i353sy2utg/.../WIPE_ROM EASY A10 - A13.exe

http://download629.mediafire.com/ybwhr1lbo8pg/.../WIPE_ROM EASY A10 - A13.exe

http://download629.mediafire.com/9bbrd36fwhag/.../WIPE_ROM EASY A10 - A13.exe

https://mega.nz/persistent/.../vsUSXICL

http://download1956.mediafire.com/8wmmcc7eey8g/.../WIPE_ROM EASY A10 - A13.exe

https://mega.nz/temporary/.../vsUSXICL

http://download629.mediafire.com/sj2uavi544qg/.../WIPE_ROM EASY A10 - A13.exe

http://download629.mediafire.com/u3n6ureecvbg/.../WIPE_ROM EASY A10 - A13.exe

http://download1651.mediafire.com/ul4rsd4rq7zg/.../WIPE_ROM EASY A10 - A13.exe

http://download1220.mediafire.com/0dc842hnej9g/.../WIPE_ROM EASY A10 - A13.exe

http://download1651.mediafire.com/kjuh8de217hg/.../WIPE_ROM EASY A10 - A13.exe

https://mega.nz/temporary/.../PBITXChZ

http://dc370.4shared.com/download/.../WIPE_ROM___EASY_A10_-_A13.exe

http://dc382.4shared.com/download/.../WIPE_ROM___EASY_A10_-_A13.exe

http://download1220.mediafire.com/03nvuk3vowcg/.../WIPE_ROM EASY A10 - A13.exe

http://download1220.mediafire.com/ehlgj29xwwng/.../WIPE_ROM EASY A10 - A13.exe

http://download1956.mediafire.com/l720b7dqubvg/.../WIPE_ROM EASY A10 - A13.exe

https://drive.google.com/uc?id=0B5-f40WmpEd5TU1mZFVLRUVCTkE&export=download

Scan wipe_rom easy a10 - a13.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.