Gridinsoft Logo
File Icon

The fg801p.exe (Freegate) File Analysis

Updated 1 month ago
Checked by Malware Check
fg801p.exe

Technical Analysis

File Name fg801p.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
196608:xFpIGskTK1tSGP00rdpcxjaFUm943ulqL1LCrDhJEVUTbPhRGFY:9/NTK1thtr/yWOm943athJEqTbPLGW
Scanner Version 1.0.216.174
Database Version 2025-05-18 13:00:30 UTC
⚠

Suspicious File Detected

Detected by 25 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

Convagent is riskware or adware that displays unwanted advertisements and generates revenue through user interactions and ad clicks.
35%
Detection Rate
7,703,568
File Size (bytes)
25/72
Engines Detected
2025-05-18
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
7c5a834e27fef202b1f35dce5fddf268
SHA1
3d22d2b4a671a7f80c2403b90594ba278e777327
SHA256
0cb960aed3b31276cf1b3f068df4aceea0ba1a3f279df2dc32efc4c319b08006
SHA512
fe2e7e838ef85438038dfcc08e62d86e290152a6add713158ffb823c2c9d284657d0ddcfb9c3af298a3b3baa31b6e61f7229ec78ed33664ecded5d625ea980a8
ImpHash
93804b9619ebd9226281b8ea3875e134

Security Engines with Detections (25 of 72)

Lionic
Trojan.Win32.Convagent.m!c Malicious
AVG
Win32:Malware-gen Malicious
MicroWorld-eScan
Gen:Variant.Fragtor.837223 Malicious
CAT-QuickHeal
Trojan.Ghanarava.1746188207ddf268 Malicious
Cylance
Unsafe Malicious
Zillya
Backdoor.Convagent.Win32.37426 Malicious
K7AntiVirus
Unwanted-Program ( 0057d4c81 ) Malicious
K7GW
Unwanted-Program ( 0057d4c81 ) Malicious
ESET-NOD32
a variant of Win32/Freegate.C potentially unsafe Malicious
Cynet
Malicious (score: 99) Malicious
Kaspersky
HEUR:Backdoor.Win32.Convagent.gen Malicious
BitDefender
Gen:Variant.Fragtor.837223 Malicious
Avast
Win32:Malware-gen Malicious
Emsisoft
Gen:Variant.Fragtor.837223 (B) Malicious
F-Secure
Dropper.DR/AVI.Agent.nmcnb Malicious
CTX
exe.trojan.freegate Malicious
Sophos
Generic Reputation PUA (PUA) Malicious
Varist
W32/ABApplication.FQUO-6283 Malicious
Avira
DR/AVI.Agent.nmcnb Malicious
Google
Detected Malicious
McAfee
Artemis!7C5A834E27FE Malicious
Malwarebytes
Malware.AI.2075758965 Malicious
Rising
Backdoor.Convagent!8.123DC (CLOUD) Malicious
MaxSecure
Trojan.Malware.8328611.susgen Malicious
Fortinet
Riskware/FreeGate Malicious
47 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: b337a9b77b12fe6fbee3bf9e8b64151f
Fuzzy: 44a90cf2abc1d70dfa944fd50efbfcb8
dHash: 70c8e2e372d0686a
Image Base 0x00400000
Entry Point 0x01321058
Compilation Time 2025-03-31 03:01:36
Checksum 0x00767dc9 (Actual: 0x00767dc9)
OS Version 5.1
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 25 libraries
Exports 0 functions
Resources 10 Resources
Sections 12 Sections

Version Information

▼
Comments
CompanyName Dynamic Internet Technology, Inc.
FileDescription Freegate
FileVersion 8, 0, 1, 0
InternalName Freegate.exe
LegalCopyright Copyright (C) 2002 - 2021
LegalTrademarks
OriginalFilename
PrivateBuild
ProductName
ProductVersion 0, 0, 0, 0
SpecialBuild
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
0x00001000 6,412,808 bytes 3,019,264 bytes 7.98 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ FF0150F7C4F48A9318D1A0C2BA2211BD
0x0061f000 1,612,096 bytes 573,952 bytes 7.98 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ B5511D43333BD2077D9AD37CCEC619C9
0x007a9000 611,032 bytes 246,784 bytes 7.93 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 5E4F8745CE4E0CB2959B2AC1043EFA70
0x0083f000 143,728 bytes 41,984 bytes 7.93 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2914FEB9DDB26ECDA5800328B3E1CA3C
0x00863000 28 bytes 512 bytes 0.48 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9515F3668D3CBA30F1DAA31AE9485EEC
0x00864000 9 bytes 512 bytes 0.16 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 796919F66DA6BBCC382C460C5C5A2F5E
0x00865000 1,235,848 bytes 171,008 bytes 7.99 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D6E94B0FE15F85A4CEB28CBE3397BB47
.idata 0x00993000 4,096 bytes 1,536 bytes 3.96 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BEE298099F92C96E14A43A5B5E698F46
.tls 0x00994000 4,096 bytes 512 bytes 0.18 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F06BA81B71F05D8CFBCF9D6AAA568C57
.rsrc 0x00995000 283,136 bytes 283,136 bytes 3.02 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 68997E8EB24540DBE7DF0A056AF50628
.themida 0x009db000 5,529,600 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.boot 0x00f21000 3,351,040 bytes 3,351,040 bytes 7.96 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ C53AC73E1A3DF62D38C4CC240EFB0E5A
Entropy Analysis Alert

6 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 10 (282,070 bytes)
Resource Type Count Total Size Percentage
RT_ICON 6 280,368 bytes
99.4%
RT_STRING 1 220 bytes
0.1%
RT_GROUP_ICON 1 90 bytes
0%
RT_VERSION 1 844 bytes
0.3%
RT_MANIFEST 1 548 bytes
0.2%

Certificate Chain Analysis

▼
Certificate Information
Description Freegate
File Version 8, 0, 1, 0
Signing Date 03:02 AM 03/31/2025 (107 days ago)
Verification Status Signed
Signers Dynamic Internet Technology Inc.; GlobalSign GCC R45 CodeSigning CA 2020; GlobalSign Code Signing Root R45; GlobalSign Root CA - R3
Counter Signers Globalsign TSA for CodeSign1 - R6 - 202311; GlobalSign Timestamping CA - SHA384 - G4; GlobalSign Root CA - R6
Internal Name Freegate.exe
Copyright Copyright (C) 2002 - 2021
Certificate Chain Summary
GlobalSign Code Signing Root R45 #1 Primary
Validity Period: 2020-07-28 00:00:00 → 2029-03-18 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 78 03 18 42 45 70 8A 41 CF 6F 01 B8 EE B4 A9 54
GlobalSign GCC R45 CodeSigning CA 2020 #2 Chain
Validity Period: 2020-07-28 00:00:00 → 2030-07-28 00:00:00
Signature Algorithm: sha256RSA
Serial Number: 77 BD 0E 03 A1 B7 08 F8 54 AB 06 72 10 D9 04 47
Dynamic Internet Technology Inc. #3 Chain
Validity Period: 2022-09-26 20:04:19 → 2025-11-25 18:41:17
Signature Algorithm: sha256RSA
Serial Number: 41 20 B2 A2 48 EA A7 61 4C 9D 2D E7
Globalsign TSA for CodeSign1 - R6 - 202311 #4 Chain
Validity Period: 2023-11-07 17:13:40 → 2034-12-09 17:13:40
Signature Algorithm: sha256RSA
Serial Number: 01 9B EA DE C8 4D 6B 8F F7 6C 3A 9F 2E 01 24 16
GlobalSign Timestamping CA - SHA384 - G4 #5 Chain
Validity Period: 2018-06-20 00:00:00 → 2034-12-10 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 01 EC 1C 92 40 DE FD 2E 40 5D 7C 47 74
GlobalSign #6 Chain
Validity Period: 2014-12-10 00:00:00 → 2034-12-10 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 45 E6 BB 03 83 33 C3 85 65 48 E6 FF 45 51

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
25 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware