Trojan.Agent.FSPA (file analysis)

The Trojan.Agent.FSPA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Agent.FSPA virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Performs HTTP requests potentially not found in PCAP.
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Attempts to modify proxy settings

How to determine Trojan.Agent.FSPA?

File Info:
name: B8293F2296AC09663E27.mlw
path: /opt/CAPEv2/storage/binaries/2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f
crc32: 4EDF780E
md5: b8293f2296ac09663e27759a39431fd6
sha1: 96d9b8d6658149ca78b2dc13e3f63bcd2dd87667
sha256: 2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f
sha512: c40e92ceb1cf4acaf20ac2e8a4290def0a77f1f49b080b7f2f7ec8033186ffb03b1fa8a9ca7eb849348cbae812f8f79b96c706a58cb4feb4c19326d6b5ec83cf
ssdeep: 6144:Y7eUxxxxt33333333hCC28YiYRrLKyx3jvfIfpQdKXoJsd2UPlhLYfZDqvasLD2d:n8nYRvJhjvGpQ3cGDO3JtP
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1FFB46B1AB172D871E3FEA3F1B5A4CB93C1EFA820275455ABE7FC025F4A2DC464234949
sha3_384: 03c1c7cd712c5ef2172c08456a35e22abaa1b99684e163591a101f27608cd0be93ae008a24e483f053abb11811321728
ep_bytes: 6a0c68d8390410e8a701000033c04089
timestamp: 2022-01-26 18:15:26

Version Info:
FileDescription: WebGrabber MFC Application
FileVersion: 1, 0, 0, 1
InternalName: WebGrabber
LegalCopyright: Copyright (C) 1999
OriginalFilename: WebGrabber.EXE
ProductName: WebGrabber Application
ProductVersion: 1, 0, 0, 1
Translation: 0x0409 0x04b0

Trojan.Agent.FSPA also known as:

How to remove Trojan.Agent.FSPA?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.