SURVEY_PROGRAM_WINDOWS_ENGLISH.exe
Classification: Malicious
SURVEY_PROGRAM_WINDOWS_ENGLISH.exe is a malicious file sample. Reported by 1 threat source, last seen 2018-11-03. Detected by 47 antivirus engines.
Detection summary
- 47 antivirus detections
- 0 IDS alerts
- 4 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Generic.Malware |
Hybrid-Analysis |
2018-11-03 00:30:42 |
2018-11-03 00:30:42 |
|
|
Sample information
- Filenames
- SURVEY_PROGRAM_WINDOWS_ENGLISH.exe
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows, ...
- Size
- 522752 bytes
- MD5
565dacda99cc8d28d3e650b4d85e8d24
- SHA-1
6c5f2ab498ae16332a3863e45d35e47e1aabe001
- SHA-256
343ace5874a5854858e11e6c196007bffc045717ed29db9b03f23d01568e8303
- First indexed
- 2018-11-03 00:30:42
- Last updated
- 2025-12-16 01:43:43
Antivirus detections
| Engine | Detection |
| APEX | Malicious |
| AVG | Win32:Trojan-gen |
| AhnLab-V3 | Trojan/Win32.Tiggre.C2808737 |
| Alibaba | Trojan:Win32/AutoHK.68b6e24c |
| Antiy-AVL | Trojan/Win32.SGeneric |
| Avast | Win32:Trojan-gen |
| Avira | TR/Dropper.Gen |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Trojan.Ghanarava.16308200635e8d24 |
| CTX | exe.trojan.generic |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.KillProc.56765 |
| ESET-NOD32 | Win32/AutoHK.NAM |
| Elastic | malicious (moderate confidence) |
| F-Secure | Trojan.TR/Dropper.Gen |
| FireEye | Generic.mg.565dacda99cc8d28 |
| Fortinet | W32/Generic.NAM!tr |
| Google | Detected |
| Ikarus | Trojan.Win32.Genome |
| Jiangmin | Trojan/Generic.aagwo |
| K7AntiVirus | Trojan ( 0051a8f21 ) |
| K7GW | Trojan ( 0051a8f21 ) |
| Kaspersky | UDS:Trojan.Win32.Diztakun.sb |
| Kingsoft | malware.kb.a.996 |
| Lionic | Trojan.Win32.Generic.4!c |
| Malwarebytes | MachineLearning/Anomalous.100% |
| McAfee | Artemis!565DACDA99CC |
| McAfeeD | ti!343ACE5874A5 |
| Microsoft | Trojan:Win32/Occamy.C34 |
| NANO-Antivirus | Trojan.Win32.KillProc.fjvgda |
| Paloalto | generic.ml |
| Panda | Trj/CI.A |
| Rising | Dropper.Generic!8.35E (CLOUD) |
| Sangfor | Trojan.Win32.AutoHK.NAM |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.PUPXDP.hc |
| Sophos | Mal/Generic-S |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Win32.Trojan.Dropper.Cdhl |
| VBA32 | Trojan.KillProc |
| Xcitium | Malware@#2h48pei088x7x |
| Yandex | Trojan.Agent!hCmHMn47mLc |
| Zillya | Dropper.Generic.Win32.4445 |
| tehtris | Generic.Malware |
Process list
| Name | Command line |
| SURVEY_PROGRAM_WINDOWS_ENGLISH.exe | |
| SURVEY~2.EXE | |
| cmd.exe | cmd /c "ftype asriel=alg "%1"" |
| cmd.exe | cmd /c "assoc .exe=asriel" |