Trojan-Dropper.Win32.Agent.tgjvit (file analysis)

The Trojan-Dropper.Win32.Agent.tgjvit is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Dropper.Win32.Agent.tgjvit virus can do?

• Sample contains Overlay data
• Reads data out of its own binary image
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• CAPE detected the embedded win api malware family
• Installs WinPCAP
• Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan-Dropper.Win32.Agent.tgjvit?

File Info:
name: A6806C8802CDE1364F20.mlw
path: /opt/CAPEv2/storage/binaries/1e30a7dba70c1c1076b83e427105a986967f43ac857f506c90603b51e9584560
crc32: C92BC8F5
md5: a6806c8802cde1364f20c58a7cebd2b2
sha1: 392ce4ba3ed80f99270fc109dbb377edcfb49f03
sha256: 1e30a7dba70c1c1076b83e427105a986967f43ac857f506c90603b51e9584560
sha512: 686d3ae1d1c9b2b1931a6109fe8ebd75af13797b8bf394600a34f43810708387af5c3792a6d593c04e4caf496494db13c1913f7f6567e08cd5371e83163e9d89
ssdeep: 196608:O2YxPMM1lH7rgGNck9BaLB7HdeAlprB/R6:O2YxPTXgGZB679eAT1R6
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CE76E013B388643FD06B1B3A582BDB149A3BB6613A139C8B57F4485C9F356413E3A787
sha3_384: d6d995d2e91ee76dd18d0fbbaba6e2d76736f0be70cdd592fe3cdaa1b4d6a7e408b1387b15487b7a9a608edc28a79a37
ep_bytes: 558bec83c4f0b8f4c56600e834cad9ff
timestamp: 2024-01-11 07:55:06

Version Info:
CompanyName: 
FileDescription: networx  Setup
FileVersion: 5.5.5
LegalCopyright: 
ProductName: networx 
ProductVersion: 5.5.5
Comments: This installation was built with Actual Installer: http://www.actualinstaller.com
ProgramID: com.embarcadero.Setup
Translation: 0x0409 0x04e4

Trojan-Dropper.Win32.Agent.tgjvit also known as:

How to remove Trojan-Dropper.Win32.Agent.tgjvit?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.