The Agreement Terms & Contract Deal exe Gen Digital Inc File Malware Analysis

The Agreement Terms & Contract Deal.exe File Analysis

Updated 1 day ago

Checked by Malware Check

Agreement Terms & Contract Deal.exe

Hash Type	Value	Action
MD5	69776322d9a85c347df4f39b4fa84542
SHA1	bd6abdda28fe75f8ad8694a6056cb455cd129756
SHA256	f4a730df23e6b448ec0b8ddd0653990c45351ff76dfc2a8292a4ce9c5cabaafc
SHA512	6b3800c99f1fe6b0578c8d36467211deb40a9bc12bfe25b57227fee0aa05852918b9f061c665eb6aeddbe44e0b0fd017dc2fd6c15364c0c7bd218ef5c3885c37
ImpHash	10f3e0e681bce5cdda85b4f70fa8f0b4

Hash Type

Value

Action

MD5

69776322d9a85c347df4f39b4fa84542

SHA1

bd6abdda28fe75f8ad8694a6056cb455cd129756

SHA256

f4a730df23e6b448ec0b8ddd0653990c45351ff76dfc2a8292a4ce9c5cabaafc

SHA512

6b3800c99f1fe6b0578c8d36467211deb40a9bc12bfe25b57227fee0aa05852918b9f061c665eb6aeddbe44e0b0fd017dc2fd6c15364c0c7bd218ef5c3885c37

ImpHash

10f3e0e681bce5cdda85b4f70fa8f0b4

PE Analysis

Basic Information

▼

Icon	Hash: 907fbb482d361365ce3e10a18bc600bd Fuzzy: 4a29a3cf6db06c881f7fa3f527940f9d dHash: 74f0c4c4ccc4c0d4
Image Base	`0x140000000`
Entry Point	`0x1400682f1`
Compilation Time	2012-02-03 10:12:46
Checksum	0x0037943b (Actual: 0x0037943b)
OS Version	6.0
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB Path	`C:\BUILD\work\e0dd96435fde7cb0\BUILDS\Release\x64\avDump.pdb`
Digital Signature	The expected hash does not match the digest in SpcInfo
Imports	10 libraries RPCRT4, WTSAPI32, SHELL32, ntdll, KERNEL32, USER32, ADVAPI32, POWRPROF, SHLWAPI, ole32
Exports	4 functions
Resources	21 Resources
Sections	8 Sections

Version Information

▼

CompanyName	Gen Digital Inc.
FileDescription	AVG Dump Process
FileVersion	25.1.9816.0
InternalName	avDump
LegalCopyright	Copyright © 2025 Gen Digital Inc. All rights reserved.
ModuleId	av
OriginalFilename	avDump.exe
ProductId	avg-av
ProductName	AVG Internet Security System
ProductVersion	25.1.9816.0
Translation	0x0409 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	2,160,732 bytes	2,161,152 bytes	6.67 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`F32E0DB4288A0A3AE580C4691A52D060`
`.rdata`	`0x00211000`	772,888 bytes	773,120 bytes	5.52 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`DE90C2EC5E133761531B3130F11B5F3A`
`.data`	`0x002ce000`	441,296 bytes	407,040 bytes	5.05 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`76598AC8C9A182DEBBDFFFB20E50D073`
`.pdata`	`0x0033a000`	103,716 bytes	103,936 bytes	6.28 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`A279C98E91DB2BB1E57443ECF163DE6F`
`.didat`	`0x00354000`	80 bytes	512 bytes	0.72 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`07BE0B7BBE446C5EB4F3A38A5421E22F`
`_RDATA`	`0x00355000`	500 bytes	512 bytes	4.19 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`29242391282540155111416371200684`
`.rsrc`	`0x00356000`	105,608 bytes	105,984 bytes	7.52 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`D4C12310562B0254D294B2778E9FC6B2`
`.reloc`	`0x00370000`	22,128 bytes	22,528 bytes	5.44 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`3B13530E1DFD687A425DE85E5044B30D`

Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 21 (104,641 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	17	102,725 bytes	98.2%
RT_GROUP_ICON	2	250 bytes	0.2%
RT_VERSION	1	908 bytes	0.9%
RT_MANIFEST	1	758 bytes	0.7%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	Agreement Terms & Contract Deal.exe
File Type	PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version	1.0.218.174
Database Version	2025-06-22 14:00:26 UTC

The Agreement Terms & Contract Deal.exe File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification