xiaobai(cpa6).exe – Trojan Agent removal

Created files:

%Temp%\QQPCDowload.exe – Trojan Agent
%Temp%\QQPCDowloads.exe – Trojan Agent
%Temp%\RarSFX0\__tmp_rar_sfx_access_check_4798019 – Trojan Agent
%Temp%\RarSFX0\UnicodeFile.bin – Trojan Agent
%Temp%\RarSFX0\UnicodeFile_1.bin – Trojan Agent
%Temp%\RarSFX1\PCDowloadup.exe – Trojan Agent
%Temp%\RarSFX1\PCDowloadups.exe – Trojan Agent
%Temp%\RarSFX1\__tmp_rar_sfx_access_check_4798179 – Trojan Agent
%Temp%\RarSFX2\rav1732650.exe – Trojan Agent
%Temp%\RarSFX2\xiaobai(cpa6).exe – Trojan Agent
%Temp%\RarSFX2\__tmp_rar_sfx_access_check_4803116 – Trojan Agent

Detected by UnHackMe:

xiaobai(cpa6).exe
Default location: %Temp%\RarSFX2\xiaobai(cpa6).exe

Dropper information:
SHA256: 95842cc7ee5367b2a2a8187b1c75ab0adca89b3b346744c63c045168f99c6ffb
SHA1: 05eaddf126a4cb7dcb63221544ac1002acb34c2f
MD5: 908a9a16dd0eba81f13e95b55a1a1a42
File size: 380584 bytes