» AGENT.EXE
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

AGENT.EXE

Forte Agent

Forte Internet Software, Inc.

File name:

AGENT.EXE

Publisher:

Forte Internet Software Inc. (signed by Forte Internet Software, Inc.)

Product:

Forte Agent

Version:

3.3

MD5:

542b6de2f22db106ff70ff741d7e2ae1

SHA-1:

4999d4eab2b8c1dff3a3f3ee9fa6fc226f0245af

SHA-256:

a15105153d423c23d16c0c3f07b70ba439e16991dd918497ad9091c1f4a7afec

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

5/5/2024 6:05:14 AM UTC (today)

Scan engine

Detection

Engine version

F-Secure

Suspicious:W32/PeepViewer!Gemini

11.2014-08-01_4

Vba32 AntiVirus

suspected of Win32.BrokenEmbeddedSignature

14.01.08

File size:

7.1 MB (7,415,328 bytes)

Product version:

3.3

Trademarks:

Forte, the Forte logo, Agent, Free Agent, News Agent, and Agent logos are trademarks of Forte Internet Software Inc.

Original file name:

AGENT.EXE

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\agent\agent.exe

Digital Signature

Signed by:

Forte Internet Software, Inc.

Authority:

Comodo CA Limited

Valid from:

12/13/2004 7:00:00 PM

Valid to:

12/14/2006 6:59:59 PM

Subject:

CN="Forte Internet Software, Inc.", OU=Internet Services, O="Forte Internet Software, Inc.", STREET=P.O. Box 131477, L=Carlsbad, S=California, PostalCode=92013-1477, C=US

Issuer:

CN=Comodo Code Signing CA, O=Comodo CA Limited, C=GB

Serial number:

593E5B7BE98B0BA92CC0EE590D7AA97A

File PE Metadata

Compilation timestamp:

3/8/2006 10:19:51 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

98304:dlA3llXApZXKsK1dkLAyV67xbnNOCNCTo3vQ:dlAVlXd1dkMyV671nY6CT1

Entry address:

0x47E915

Entry point:

6A, 60, 68, F0, 71, 99, 00, E8, 5F, 5B, 00, 00, BF, 94, 00, 00, 00, 8B, C7, E8, 03, ED, FF, FF, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, D4, 34, 90, 00, 8B, 4E, 10, 89, 0D, 14, 47, A6, 00, 8B, 46, 04, A3, 20, 47, A6, 00, 8B, 56, 08, 89, 15, 24, 47, A6, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, 18, 47, A6, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, 18, 47, A6, 00, C1, E0, 08, 03, C2, A3, 1C, 47, A6, 00, 33, F6, 56, 8B, 3D, F0, 33, 90, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03... 
[+]

Entropy:

6.0777

Developed / compiled with:

Microsoft Visual C++ v7.0

Code size:

5 MB (5,251,072 bytes)

Shell Open Command

Open type:

news

Command:

"C:\Program Files2\agent\agent.exe" -homC:newsinifile -urC:"%1"

The file AGENT.EXE has been discovered within the following program.

Forté Agent by Forté Internet Software, Inc.

Forté Agent is an email and Usenet news client used on the Windows operating system.

www.forteinc.com/agent/support.php

About 2% of users remove it

Scan AGENT.EXE - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.