Win32/Agent_AGen.DDZ information

The Win32/Agent_AGen.DDZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent_AGen.DDZ virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32/Agent_AGen.DDZ?


File Info:
name: 4CB98CF405653881A7E1.mlw
path: /opt/CAPEv2/storage/binaries/57322b391228260a77b96202ff8ae383f5b50ae45e40e9c2f79ecfe9ffe96330
crc32: 8FED35BF
md5: 4cb98cf405653881a7e108007223b5a7
sha1: 0922ad5856df4e316a7eb8ea739ae99a8988ac2f
sha256: 57322b391228260a77b96202ff8ae383f5b50ae45e40e9c2f79ecfe9ffe96330
sha512: db3df5fbea83984d317d8f2d37435847429aca4f11c5fdf74620cafb06b62dc3ce4cac73a38a6e9485db35353acc1eca365427de4e24071c8e4474850d303696
ssdeep: 768:oRzMqesNd/BZ0pPP3lLuzZPKqYHYRZoR5:oRQqesVaPP3lLuBZY4RY
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T10AE2D8597E484CEBD960173894F7C7762A7CF190C6234B62FA50A7308B337A5609B36E
sha3_384: b4574cb44810105c1429523a8e4ac5ee3896b005f4cdf4a85c90d50946b7638f0a45fd141acc853cb7343d9a6873a99f
ep_bytes: 57565383ec108b5c24248b7424208b7c
timestamp: 2024-02-09 02:34:04

Version Info:
0: [No Data]

Win32/Agent_AGen.DDZ also known as:

Sangfor	Trojan.Win32.Save.a
BitDefenderTheta	Gen:NN.ZedlaF.36744.c46@aqH4Cuj
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent_AGen.DDZ
Cynet	Malicious (score: 100)
FireEye	Generic.mg.4cb98cf405653881
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Wacatac.B!ml
Rising	Trojan.Agent!8.B1E (TFE:dGZlOgXaBTBCv1bQcA)
Fortinet	W32/Agent.DDP!tr
DeepInstinct	MALICIOUS

How to remove Win32/Agent_AGen.DDZ?

Win32/Agent_AGen.DDZ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X