Patch.exe Trojan Agent Analysis
| Online Virus Checker | v.1.0.183.174 |
| DB Version: | 2024-07-26 01:00:20 |
Trojan.Win32.Agent.dg
Trojan Agent is malicious software that masquerades as legitimate files or programs to carry out various harmful actions on infected computers, such as data theft or remote control by cybercriminals.
| File | Patch.exe |
| Checked | 2024-07-25 22:57:29 |
| MD5 | e8bf473ccab335d19c7d570f6f651f3a |
| SHA1 | 8ba827f09c4cd553cfd9f96c52ac19c68365a3bd |
| SHA256 | 7c71eab6ed15b1acece93719fe317b4a7339a8b925112fb4a80314d7a06555a0 |
| SHA512 | ade2a1325b43484749f042c74ca00e2597ae8d3b8eb19e83f3cb4268682740dbfe142d89a529e8060c88a2d27b667778f6cfdf2e86e911f67db29f1f30b6e6a6 |
| Imphash | f34d5f2d4577ed6d9ceec516c1f5a744 |
| File Size | 1780736 bytes |
Trojan.Win32.Agent.dg Removal
Gridinsoft has the capability to identify and eliminate Trojan.Win32.Agent.dg without requiring further user intervention.
- Start by downloading Gridinsoft Anti-Malware to your computer.
- Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
- Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
- Click on the "Standard Scan" button.
- After the scanning process is finished, click on "Clean Now" to remove any detected threats.
- If prompted, restart your system to complete the removal process.
File Version Information
| Translation | 0x0000 0x04b0 |
| Comments | PDFelement Patch By DeltaFoX |
| CompanyName | DeFconX |
| FileDescription | PDFelement_Patch_DFoX |
| FileVersion | 3.5.0.0 |
| InternalName | PDFelement_Patch_DFoX.exe |
| LegalCopyright | Copyright © 2019 |
| LegalTrademarks | DeltaFoX |
| OriginalFilename | PDFelement_Patch_DFoX.exe |
| ProductName | PDFelementPatch_DFoX |
| ProductVersion | 3.5.0.0 |
| Assembly Version | 3.5.0.0 |
Portable Executable Info
 |
d96cffd032a46cc9bb381a50eded4a94 a3a80cd095c655e6014f36ef7fc53076 8660696959591880 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x0058bf2e |
| Compilation: | 2019-11-15 12:21:46 |
| Checksum: | 0x001bb295 (Actual: 0x001bb295) |
| OS Version: | 4.0 |
| PDB Path: | PDFelement_Patch_DFoX.pdb |
| PEiD: | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 4 |
| Imports: | mscoree, |
| Exports: | 0 |
| Resources: | 10 |
Sections
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| .text | 0x00002000 | 0x00189f34 | 0x0018a000 | b72ae53ca0055b2e3f237390cfdaf785 | 5.91 |
| .sdata | 0x0018c000 | 0x00000186 | 0x00000200 | 149cdd8949394c78c020269b904dcb53 | 6.37 |
| .rsrc | 0x0018e000 | 0x00028224 | 0x00028400 | 802b0e7d3ff9885482afa6403bcb502f | 3.80 |
| .reloc | 0x001b8000 | 0x0000000c | 0x00000200 | 9feb518637d821ba46e332cd7c4339b1 | 0.10 |
