| K7 Detection Name | Affected OS | Prevalence | AV Definition Version |
|---|---|---|---|
| Hacktool ( 005cf1b31 ) | Windows | Low | 12.246.56295 |
| MD5 | 94c8fddaad8f58e6f9c1f4439c3b0e28 |
| SHA256 | 9b666e5b1107f548cf68a4ab4717416eaff62817d8af9f5db1d2161284c7f1d1 |
| File Size | 330,752 bytes |
| Packer Information | N/A |
| First Seen | 07-07-2025 |
| Last Seen | 23-05-2026 |
| Aliases | Win64/HackTool.Agent.OY |
Behavior Details
1. Creates Registry:
Adds data 65C422215381A20D8027598B11603C134B3F2B6F5A197978ECC4D79CF78F1E8987484BA0BA80EE43321CF334BE2DA1BB30333CBA436244433CBF539500287254 under HKEY_CURRENT_USER\SOFTWARE\Grass Valley\EDIUSID\2
Adds data wamihec164@excederm.com under HKEY_CURRENT_USER\SOFTWARE\Grass Valley\EDIUSID\1
Removal Instructions
1. Update K7 security to the latest version.
2. Open Windows registry editor and delete the following keys:
HKEY_CURRENT_USER\SOFTWARE\Grass Valley\EDIUSID\2
HKEY_CURRENT_USER\SOFTWARE\Grass Valley\EDIUSID\1
3. Restart the machine.