home

0019705af6a2a8f19ce4b43bf212dc62_17408.npb

The file 0019705af6a2a8f19ce4b43bf212dc62_17408.npb has been detected as malware by 24 anti-virus scanners.
MD5:
0019705af6a2a8f19ce4b43bf212dc62

SHA-1:
ba4de80af9669f13348c966ac222e1230b746ef5

SHA-256:
88c71d23cc12d975277b5e5e04a0b0d1d1e78a344ad984a64a5e880a2db3e719

Scanner detections:
24 / 68

Status:
Malware

Analysis date:
4/30/2024 12:53:08 PM UTC  (today)

Scan engine
Detection
Engine version

AhnLab V3 Security
Win-Trojan/Agent.17408.PN
5.0.

Avira AntiVirus
TR/PSW.Agent.mpp
7.9.0.238

Emsisoft A-Squared
Trojan-PWS.Win32.Agent!IK
4.5.0.24

avast!
Win32:Agent-AFRQ
2014.9-170310

AVG
Agent
2018.0.2444

Bitdefender
Trojan.Generic.1755182
1.0.20.345

Comodo Security
TrojWare.Win32.PSW.Agent.mpp
1836

ESET NOD32
Win32/PSW.Agent (variant)
11.4296

Fortinet FortiGate
W32/Agent.MPP!tr.pws
3/10/2017

F-Prot
W32/Trojan2.GWTG
v6.4.4.4.56

F-Secure
Trojan-PSW.Win32.Agent.mpp
11.2017-10-03_6

G Data
Trojan.Generic.1755182
17.3.19

IKARUS anti.virus
Trojan-PWS.Win32.Agent
t3scan.1.1.64.0

K7 AntiVirus
Trojan-PSW.Win32.Agent.mpp
13.7.10.808

Kaspersky
Trojan-PSW.Win32.Agent
14.0.0.-1286

McAfee
Spy-Agent.ef
5600.6100

Microsoft Security Essentials
Trojan:Win32/Orsam!rts
1.163.1557.0

Norman
W32/Agent.NCQB
11.20170310

Panda Antivirus
Trj/Downloader.MDW
17.03.10.05

Quick Heal
TrojanPSW.Agent.mpp
3.17.10.00

Sophos
Mal/Generic-A
4.44

Trend Micro
TSPY_AGENT.ATXU
10.465.10

Vba32 AntiVirus
Trojan-PSW.Win32.Agent.mpp
3.12.10.9

ViRobot
Trojan.Win32.PSWAgent.17408.G
2009.7.31.1863

File size:
17 KB (17,408 bytes)

Common path:
C:\ProgramData\net protector\npbkp\0019705af6a2a8f19ce4b43bf212dc62_17408.npb

File PE Metadata
Compilation timestamp:
3/19/2009 8:30:26 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x36B8

Entry point:
55, 8B, EC, 6A, FF, 68, 20, 41, 40, 00, 68, 40, 38, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, D8, 40, 40, 00, 59, 83, 0D, E4, 5C, 40, 00, FF, 83, 0D, E8, 5C, 40, 00, FF, FF, 15, D4, 40, 40, 00, 8B, 0D, E0, 5B, 40, 00, 89, 08, FF, 15, D0, 40, 40, 00, 8B, 0D, DC, 5B, 40, 00, 89, 08, A1, CC, 40, 40, 00, 8B, 00, A3, EC, 5C, 40, 00, E8, 10, 01, 00, 00, 39, 1D, A0, 5B, 40, 00, 75, 0C, 68, 34, 38, 40, 00, FF, 15, C8, 40...
 
[+]

Entropy:
6.1810

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
10.5 KB (10,752 bytes)

Remove 0019705af6a2a8f19ce4b43bf212dc62_17408.npb - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.