home

eula.exe

The executable eula.exe has been detected as malware by 28 anti-virus scanners.
MD5:
d4a1667d24b78d4a207a5c98ad6135a1

SHA-1:
09c3510a35b93e4a9918c17ee80a9aa003697daf

SHA-256:
206c8abfbd99ae8fa8bed97800f4132558e0db7ac288691de5855e500e30a24d

Scanner detections:
28 / 68

Status:
Malware

Analysis date:
4/26/2024 2:57:32 PM UTC  (today)

Scan engine
Detection
Engine version

AhnLab V3 Security
Dropper/Agent.38912.CE
5.0.

Avira AntiVirus
TR/Dropper.Gen
7.9.1.158

Emsisoft A-Squared
Trojan-Dropper.TAR!IK
4.5.0.50

avast!
Win32:Agent-AEXI
2014.9-170316

AVG
Agent2
2018.0.2437

Bitdefender
Trojan.Generic.1663965
1.0.20.375

Clam AntiVirus
Trojan.Dropper.Agent-178
0.98/17011

Comodo Security
TrojWare.Win32.TrojanDropper.Agent.~CGZ
3827

Dr.Web
Trojan.MulDrop.31724
9.0.1.075

ESET NOD32
Win32/Agent.PIN
11.4836

Fortinet FortiGate
W32/Agent.ANEH!tr
3/16/2017

F-Prot
W32/Dropper.AJIZ
v6.4.5.1.85

F-Secure
Trojan.Generic.1663965
11.2017-16-03_5

G Data
Trojan.Generic.1663965
17.3.19

IKARUS anti.virus
Trojan-Dropper.TAR
t3scan.1.1.80.0

K7 AntiVirus
Trojan-Dropper.Win32.Agent.aneh
13.7.10.966

Kaspersky
Trojan-Dropper.Win32.Agent
14.0.0.-1318

McAfee
Generic Dropper!k
5600.6093

Microsoft Security Essentials
TrojanDropper:Win32/Vtimrun.A
1.163.1557.0

Norman
W32/Agent.SJRW
11.20170316

nProtect
Trojan-Dropper/W32.Agent.38912.BG
2009.1.8.0

Panda Antivirus
Trj/Downloader.MDW
17.03.16.12

Prevx
Medium Risk Malware Dropper
3.0

Quick Heal
TrojanDropper.Agent.amsf
3.17.10.00

Sophos
Troj/Farfli-Gen
4.50

Trend Micro
TROJ_DROPPER.JCS
10.465.16

Vba32 AntiVirus
BScope.Dropper.Gen.18
3.12.12.1

ViRobot
Dropper.Agent.38912.AD
2010.2.5.2173

File size:
38 KB (38,912 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\eula.exe

File PE Metadata
Compilation timestamp:
4/19/2009 7:57:12 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x12D8

Entry point:
56, 6A, 00, FF, 15, C0, 10, 40, 00, 8B, F0, 56, E8, 0F, 00, 00, 00, 59, 56, E8, 60, 34, 00, 00, 50, FF, 15, 44, 10, 40, 00, 5E, 55, 8B, EC, 83, EC, 1C, 8B, 45, 08, 8B, 48, 3C, 53, 56, 8D, 1C, 01, 68, 84, 11, 40, 00, 8D, B3, F8, 00, 00, 00, FF, 15, C0, 10, 40, 00, 85, C0, 89, 45, F8, 0F, 84, DF, 00, 00, 00, 57, 8B, 3D, C8, 10, 40, 00, 68, 70, 11, 40, 00, 50, FF, D7, 68, 58, 11, 40, 00, FF, 75, F8, 89, 45, F4, FF, D7, 68, 48, 11, 40, 00, FF, 75, F8, 89, 45, EC, FF, D7, 83, 65, F8, 00, 66, 83, 7B, 06, 00, 89...
 
[+]

Entropy:
7.6289

Code size:
3.5 KB (3,584 bytes)

Remove eula.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.