Online Virus Checker | v.1.0.183.174 |
DB Version: | 2024-08-01 06:00:30 |
Trojan Agent is malicious software that masquerades as legitimate files or programs to carry out various harmful actions on infected computers, such as data theft or remote control by cybercriminals.
File | LT SkinChanger.exe |
Checked | 2024-08-01 04:03:05 |
MD5 | 2edf4bca814d963ba53d3de64ae8c84c |
SHA1 | 241facc735208888dc17b32d0e3b255fb49d103c |
SHA256 | ff054443d86e7e49663fc55217ce38ff0a41d581192df256939c12326c38f7a3 |
SHA512 | 75bef7f448e5c6058b34caa1a42a295ab36ba238f9c238ed77201edf688440de50ece4f68ee9c831434ddce79f86374892bccebf405da2e8295f4c424f6ea8d4 |
Imphash | 2ac23c52e7647c5bbea38e98bb68c652 |
File Size | 1911419 bytes |
Gridinsoft has the capability to identify and eliminate Trojan.Win64.Agent.sa without requiring further user intervention.
8bbaba72009303cec3aceb3c778e6714 f40dbbfcb1eebb4e7f83f7f55d3c33b6 70e0eac89cb6c823 |
|
Image Base: | 0x140000000 |
Entry Point: | 0x14000be20 |
Compilation: | 2024-06-15 07:04:01 |
Checksum: | 0x001e0b8d (Actual: 0x001e0b8d) |
OS Version: | 5.2 |
PEiD: | PE32+ executable (GUI) x86-64, for MS Windows |
Sign: | The PE file does not contain a certificate table. |
Sections: | 6 |
Imports: | USER32, COMCTL32, KERNEL32, ADVAPI32, GDI32, |
Exports: | 0 |
Resources: | 8 |
Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
---|---|---|---|---|---|
.text | 0x00001000 | 0x00028f60 | 0x00029000 | de5b7deeb13436557c4ba84aa3d5b3fb | 6.48 |
.rdata | 0x0002a000 | 0x00012510 | 0x00012600 | a78a428e3c1648b973c8db56cfe12845 | 5.76 |
.data | 0x0003d000 | 0x000073c8 | 0x00000e00 | 8013c58834a08435a779ff436ff10eb7 | 1.83 |
.pdata | 0x00045000 | 0x000021c0 | 0x00002200 | d16e38966953c987eb484ac72e115d6c | 5.43 |
.rsrc | 0x00048000 | 0x0003ee18 | 0x0003f000 | cc76aa3da24e659b8168d9c5edac5fb9 | 7.61 |
.reloc | 0x00087000 | 0x00000768 | 0x00000800 | be4464056c7d34453c1e26c7294816ee | 5.28 |