home

{01863a88-fe5f-4737-b05c-08e588079391}

The file {01863a88-fe5f-4737-b05c-08e588079391} has been detected as malware by 35 anti-virus scanners.
MD5:
4dfde38ff8e1df866e863261f9ba2c07

SHA-1:
9aaa21e1b4be7a4e19107fd63a20b1a82bd1d3f4

SHA-256:
e82b78398ab7168580e34f787b5ebf552fa0f674418d198347b2ac49666ccc77

Scanner detections:
35 / 68

Status:
Malware

Analysis date:
4/26/2024 5:28:00 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.AgentWDCR.AAE
856

Agnitum Outpost
Trojan.Tuscas
7.1.1

AhnLab V3 Security
Trojan/Win32.Ransomlock
2014.06.24

Avira AntiVirus
TR/Agent.abxa.63
7.11.156.126

avast!
Win32:Tuscas-B [Trj]
2014.9-141002

AVG
PSW.Generic12
2015.0.3334

Baidu Antivirus
Trojan.Win32.Tuscas
4.0.3.14102

Bitdefender
Trojan.AgentWDCR.AAE
1.0.20.1375

Bkav FE
W32.IntrodopLTO.Trojan
1.3.0.4959

Comodo Security
UnclassifiedMalware
18648

Dr.Web
Trojan.Tuscas.1
9.0.1.0275

Emsisoft Anti-Malware
Trojan.AgentWDCR.AAE
8.14.10.02.03

ESET NOD32
Win32/Spy.Tuscas
8.9990

Fortinet FortiGate
W32/Agent.A!tr
10/2/2014

F-Secure
Trojan.AgentWDCR.AAE
11.2014-02-10_5

G Data
Trojan.AgentWDCR.AAE
14.10.24

IKARUS anti.virus
Trojan-Spy.Agent
t3scan.1.6.1.0

K7 AntiVirus
Spyware
13.180.12498

Kaspersky
HEUR:Trojan.Win32.Generic
14.0.0.3164

Malwarebytes
Backdoor.Papras
v2014.10.02.03

McAfee
RDN/Generic.bfr!gf
5600.6990

MicroWorld eScan
Trojan.AgentWDCR.AAE
15.0.0.825

NANO AntiVirus
Trojan.Win32.Tuscas.cuwpzs
0.28.0.60475

Norman
Troj_Generic.SZEFV
11.20141002

nProtect
Trojan.AgentWDCR.AAE
14.06.23.01

Panda Antivirus
Trj/WLT.A
14.10.02.03

Qihoo 360 Security
Win32/Trojan.8ca
1.0.0.1015

Quick Heal
Trojan.Agent.A5
10.14.14.00

Sophos
Troj/Agent-AGFA
4.98

Total Defense
Win32/Tnega.TPVdR
37.0.11017

Trend Micro House Call
TROJ_INJECT.OO
7.2.275

Trend Micro
TROJ_INJECT.OO
10.465.02

VIPRE Antivirus
Trojan.Win32.Generic
30596

ViRobot
Trojan.Win32.U.Agent.228864
2011.4.7.4223

XVirus List
Win32.Detected
2.10.2

File size:
223.5 KB (228,864 bytes)

File PE Metadata
Compilation timestamp:
3/12/2014 3:12:20 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1536:NzxbF5+LyErNuPWvT1MhK/Uyvmo0khQMhnDkWBGVx5Rsun35Ktp:Nzx5YyErNuMhyKd0qHxDvBm1n

Entry address:
0x4FCC

Entry point:
55, 8B, EC, 8B, 45, 0C, 53, 57, 33, FF, 2B, C7, 6A, 01, 5B, 0F, 84, C5, 00, 00, 00, 48, 0F, 85, 24, 01, 00, 00, 8B, 45, 08, 50, A3, B8, 8E, 03, 10, FF, 15, 4C, 01, 01, 10, 57, 68, 00, 80, 3E, 00, 57, FF, 15, 50, 01, 01, 10, A3, B4, 8E, 03, 10, FF, 15, 18, 01, 01, 10, A3, B0, 8E, 03, 10, B8, 48, 03, 00, 00, E8, D2, D1, FF, FF, 3B, C7, 74, 0E, 8B, C8, E8, 23, 8B, 00, 00, A3, A0, 8E, 03, 10, EB, 06, 89, 3D, A0, 8E, 03, 10, E8, CF, 8A, 00, 00, 8B, C3, E8, AE, D1, FF, FF, A3, 7C, 8E, 03, 10, A1, A0, 8E, 03, 10...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
57 KB (58,368 bytes)

Remove {01863a88-fe5f-4737-b05c-08e588079391} - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.