home

{2a6543ec-62a1-4adc-8302-0b43f754aa62}

The file {2a6543ec-62a1-4adc-8302-0b43f754aa62} has been detected as malware by 36 anti-virus scanners. This trojon will perform a number of actions that will compromise a PC including changing protected system registry values, hiding in protected operating system locations and downloading and installing additional malware.
MD5:
502e2244c6ea696d55d2cfaaec42098d

SHA-1:
a41361dd9671fc86b8b6d1ef4458db5278a10f89

SHA-256:
dfe3b1573618702f82ca4dc00d3a329a25af181cbd5c7313ea68d09193426d7b

Scanner detections:
36 / 68

Status:
Malware

Analysis date:
4/19/2024 4:06:33 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Agent.BBUW
856

AegisLab AV Signature
HackTool.MSIL.Agent
2.1.4+

Agnitum Outpost
Trojan.Disfa
7.1.1

AhnLab V3 Security
Trojan/Win32.Generic
14.10.02

Avira AntiVirus
TR/Injector.iskd.48
7.11.146.2

avast!
Win32:Malware-gen
2014.9-141002

Baidu Antivirus
Trojan.MSIL.Disfa
4.0.3.14102

Bitdefender
Trojan.Agent.BBUW
1.0.20.1375

Bkav FE
W32.AgentAdynzetR.Trojan
1.3.0.4959

Comodo Security
UnclassifiedMalware
18185

Dr.Web
Trojan.DownLoader9.25188
9.0.1.0275

Emsisoft Anti-Malware
Trojan.Agent.BBUW
8.14.10.02.03

ESET NOD32
MSIL/Agent.NH
8.9734

Fortinet FortiGate
W32/Disfa.BPC!tr
10/2/2014

F-Secure
Trojan.Agent.BBUW
11.2014-02-10_5

G Data
Trojan.Agent.BBUW
14.10.24

IKARUS anti.virus
Trojan.Win32.Malagent
t3scan.1.6.1.0

K7 AntiVirus
Trojan
13.176.11913

Kaspersky
Trojan.MSIL.Disfa
14.0.0.3164

Malwarebytes
Spyware.Password
v2014.10.02.03

McAfee
RDN/Generic.dx!czb
5600.6990

Microsoft Security Essentials
Trojan:Win32/Malagent
1.10502

MicroWorld eScan
Trojan.Agent.BBUW
15.0.0.825

NANO AntiVirus
Trojan.Win32.Disfa.cvjfak
0.28.0.59608

Norman
Agent.BAOBR
11.20141002

nProtect
Trojan/W32.Agent.290816.AGO
14.04.28.01

Panda Antivirus
Trj/CI.A
14.10.02.03

Qihoo 360 Security
Win32/Trojan.670
1.0.0.1015

Quick Heal
Trojan.Generic
10.14.14.00

Sophos
Mal/Generic-S
4.98

SUPERAntiSpyware
Trojan.Agent/Gen-Bublik
10325

Trend Micro House Call
TROJ_GEN.R0CBC0PBQ14
7.2.275

Trend Micro
TROJ_GEN.R0CBC0PBQ14
10.465.02

Vba32 AntiVirus
Trojan.MSIL.Disfa
3.12.26.0

VIPRE Antivirus
Trojan.Win32.Generic
28674

XVirus List
Win32.Detected
2.10.2

File size:
284 KB (290,816 bytes)

File PE Metadata
Compilation timestamp:
2/16/2014 4:37:30 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:0kAcT3iOS2dg69tP88P/7+YNv2Sbux+jz:0kAMv1P/6Yux+

Entry address:
0x4896E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
282.5 KB (289,280 bytes)

Remove {2a6543ec-62a1-4adc-8302-0b43f754aa62} - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.