Troj/Agent-TED

File Information

Size

327K

SHA-1

ff7b9f01c3da010d14335699908d286d9422a102

MD5

2d775f0a67559011ce57f0ab353e6cc1

CRC-32

20bed274

File type

application/x-ms-dos-executable

First seen

2011-08-22

Runtime Analysis

Registry Keys Created

• HKCR\Zghypcxhle\CLSID

  (Default)

  {1a237c5c-5e6b-4aa7-8a05-a1bb0b35deae}

• HKEY_USERS\S-1-5-19_Classes\Software\Zghypcxhle\CLSID

  (Default)

  {1a237c5c-5e6b-4aa7-8a05-a1bb0b35deae}

• HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main

  XMLHTTP_UUID_Default

  3a 84 10 e7 33 55 70 46 a5 cb a9 bb fc 05 df 98

• HKEY_USERS\S-1-5-20\Software\Zghypcxhle\CLSID

  (Default)

  {1a237c5c-5e6b-4aa7-8a05-a1bb0b35deae}

• HKEY_USERS\S-1-5-20\Software\Classes\Software\Zghypcxhle\CLSID

  (Default)

  {1a237c5c-5e6b-4aa7-8a05-a1bb0b35deae}

• HKCU\Software\Microsoft\Internet Explorer\Main

  XMLHTTP_UUID_Default

  3a 84 10 e7 33 55 70 46 a5 cb a9 bb fc 05 df 98

• HKEY_USERS\S-1-5-19\Software\Zghypcxhle\CLSID

  (Default)

  {1a237c5c-5e6b-4aa7-8a05-a1bb0b35deae}

• HKEY_USERS\S-1-5-20_Classes\Software\Zghypcxhle\CLSID

  (Default)

  {1a237c5c-5e6b-4aa7-8a05-a1bb0b35deae}

• HKCU\Software\Classes\Software\Zghypcxhle\CLSID

  (Default)

  {1a237c5c-5e6b-4aa7-8a05-a1bb0b35deae}

• HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main

  XMLHTTP_UUID_Default

  3a 84 10 e7 33 55 70 46 a5 cb a9 bb fc 05 df 98

• HKCR\CLSID\{E710843A-5533-4670-A5CB-A9BBFC05DF98}\InprocServer32

  (Default)

  c:\test_item.dll

• HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main

  XMLHTTP_UUID_Default

  3a 84 10 e7 33 55 70 46 a5 cb a9 bb fc 05 df 98

• HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main

  XMLHTTP_UUID_Default

  3a 84 10 e7 33 55 70 46 a5 cb a9 bb fc 05 df 98

• HKCU\Software\Zghypcxhle\CLSID

  (Default)

  {1a237c5c-5e6b-4aa7-8a05-a1bb0b35deae}

• HKEY_USERS\S-1-5-18\Software\Zghypcxhle\CLSID

  (Default)

  {1a237c5c-5e6b-4aa7-8a05-a1bb0b35deae}

• HKCU_Classes\Software\Zghypcxhle\CLSID

  (Default)

  {1a237c5c-5e6b-4aa7-8a05-a1bb0b35deae}