| K7 Detection Name | Affected OS | Prevalence | AV Definition Version |
|---|---|---|---|
| Trojan ( 005c157f1 ) | Windows | Low | 12.223.55134 |
| MD5 | eea0ca56cac673d6873ce31164acc617 |
| SHA256 | 9d55ec0bfeddd2151d7ebdb1c1101c790581957be0ca7d1602267a625fba87e5 |
| File Size | 14,668,008 bytes |
| Packer Information | N/A |
| First Seen | 15-03-2025 |
| Last Seen | 12-08-2025 |
| Aliases | Win32/Agent.AHDB |
Behavior Details
1. Dropped files:
nscA30D.tmp
lg
nshA37B.tmp
Under the folder
C:\Users\
2. Dropped files:
plug.dll
ioSpecial.ini
InstallOptions.dll
modern-wizard.bmp
Under the folder
C:\Users\
Removal Instructions
1. Update the copy of K7 security to the latest version.
2. Scan the system completely and remove the detected files.
3. Restart the machine.