GridinSoft Threat Intelligence

DonTech.dll threat report

Detected as Adware.Agent File reputation report
MD5 36cb95e29e20d1b066ec5b8eca6c4d20
Latest seen 2024-11-24 23:00:54 (a year ago)
First seen 2017-05-21 04:02:47 (8 years ago)
Size 241 KB

GridinSoft Anti-Malware detection

Detected by GridinSoft before you download

The current ThreatInfo record shows this exact file hash detected as Adware.Agent. Download GridinSoft Anti-Malware to scan the device, confirm whether this file is present, and remove the detected object if it is found.

Detection name
Adware.Agent
Recommended action
Scan and remove
Last analysis
2024-11-24 23:00:54 (a year ago)
File hash
36cb95e29e20d1b066ec5b8eca6c4d20
Download Anti-Malware

Why it matters

Why GridinSoft flags this file

Detection

GridinSoft identifies the sample as Adware.Agent.

Timeline

First seen 2017-05-21 04:02:47 (8 years ago); latest analysis 2024-11-24 23:00:54 (a year ago).

Aliases

This hash has appeared under multiple file names, which can happen with repackaging, bundling, or deliberate renaming.

Observed locations

ThreatInfo has seen this file in user or system paths listed below. Unexpected locations increase the need for local verification.

Recommended action

What to do next

  1. Compare the MD5 above with the file found on the device.
  2. Check whether the file appears in the observed locations or under one of the alternate names.
  3. Run GridinSoft Anti-Malware to confirm the detection and remove the file if it is present.

DonTech.dll is a Windows file recorded in the ThreatInfo database. The current detection status is Adware.Agent, based on the latest analysis from 2024-11-24 23:00:54 (a year ago).

If DonTech.dll appears on your computer unexpectedly, treat it as suspicious. Check its location, digital signature, and recent system changes before allowing it to run. A full anti-malware scan is recommended when this file is detected as Adware.Agent.

MD5: 36cb95e29e20d1b066ec5b8eca6c4d20
Size: 241 KB
First Published: 2017-05-21 04:02:47 (8 years ago)
Latest Published: 2024-11-24 23:00:54 (a year ago)
Status: Adware.Agent (on last analysis)
Analysis Date: 2024-11-24 23:00:54 (a year ago)
DonTech.dll detection screenshot

The screenshot is a visual record of a GridinSoft Anti-Malware detection for this sample. Use the hash and metadata above as the primary identifiers when comparing the file on your system.

%commonappdata%\ultimatesecuritypackage
%commonappdata%\hotfresh
%sysdrive%\adwcleaner\quarantine\files\ehbedjvccrsmsdyzanjnaajmepdutfig
%commonappdata%\plusdax
%commonappdata%\voyasollam
%commonappdata%\appxadsulp
%commonappdata%\utatity
%commonappdata%\locep
%commonappdata%\subair
%commonappdata%\affenpinscher

ThreatInfo has observed DonTech.dll in the locations listed above. Files found in temporary folders, user profile folders, startup locations, or unusual application directories should be reviewed more carefully than files installed under a known program directory.

GrooveAnkix.dll topjob.dll Stanlab.dll Whitelax.dll Qvolight.dll Tamtech.dll Lattouch.dll latdom.dll Trustfix.dll Unocore.dll Roundbam.dll Transstock.dll Silverlax.dll BetaHold.dll Zamfind.dll Bamnix.dll Goldentam.dll yearlux.dll StockDax.dll labfix.dll Labfix.dll.quarantined Zonefax.dll Triostrong.dll ScotDonfix.dll bameco.dll Ran-Tom.dll Damsing.dll SuperZootex.dll U-hattax.dll Goodfax.dll Tamp-Home.dll Bam-Ity.dll vaiastring.dll silfinfix.dll Med-Strong.dll Salt-La.dll ozer-kix.dll zerphase.dll Dingfresh.dll TrippleSoft.dll TechOzenix.dll physreddex.dll ventosanhold.dll Transflex.dll Tipsanstring.dll K-fan.dll In-Top.dll Indigoottough.dll tresflex.dll Rankin.dll Subla.dll Openzozex.dll daltdox.dll Gravedameco.dll GeoSoloity.dll freshtop.dll tanity.dll Goodkix.dll Lamstring.dll tan-cof.dll Flexflex.dll trzC0A1.tmp UnaTop.dll CofZoofax.dll Supertrax.dll lamit.dll ViaPlus.dll Damfan.dll Soltax.dll Namstock.dll Tamplam.dll Silverlamity.dll Sumlotdax.dll Istip.dll Bambam.dll Opedax.dll Santone.dll Strongcore.dll Geolex.dll Trantom.dll Kaytouch.dll Y-dom.dll Ontojoyit.dll Geotom.dll Medzap.dll Uno-Eco.dll jaysing.dll Greendex.dll Zonsontone.dll OpeZimair.dll Lotfind.dll Doublehome.dll Salttough.dll Zathtech.dll Hotstrong.dll.quarantined Tanhome.dll Zoofax.dll Gravestock.dll Kinjob.dll Goodhold.dll Zerbam.dll stockplus.dll Superdox.dll MathStatit.dll Fasefix.dll Freshlax.dll Gravehome.dll Is-Tech.dll SuperRanlax.dll OzerNamtone.dll Tonjob.dll meddom.dll Over-Tough.dll Resoft.dll konjoyflex.dll Vivain.dll Phystouch.dll Doublelight.dll Ding-Core.dll Sumair.dll unazimin.dll Bamlax.dll freelux.dll Homedox.dll Joygohold.dll RedNamstock.dll CanString.dll Y-in.dll ItKix.dll VoyaSantone.dll ZamSolstrong.dll VolLab.dll tonin.dll transdintech.dll Can-Flex.dll Sum-Hold.dll hotlab.dll Fasehold.dll Tamdox.dll Daltfan.dll trioit.dll Topsing.dll Hot-Air.dll Hot-Air.dll.quarantined SaltDinlight.dll NimQuadfan.dll Unatouch.dll Istouch.dll Reddom.dll Move-Plus.dll rankcore.dll Konksing.dll Statzoofax.dll Zon-Flex.dll KinLam.dll donlam.dll Pluszap.dll Openlex.dll Scotit.dll Vollux.dll Zenbam.dll Geoing.dll Tiplight.dll Isdubdax.dll Can-It.dll Hotdex.dll Silvertex.dll Trislax.dll Ontosing.dll Kanfax.dll Freshing.dll Lamsanit.dll Ozerron.dll Damhold.dll Unifix.dll tantech.dll Laex.dll dingbam.dll Redzap.dll Lamsing.dll zoomlatity.dll Qvolab.dll X-Dontouch.dll X-Dontouch.dll.quarantined FinFan.dll Warm-Lab.dll Voltax.dll Conhatjob.dll Latcore.dll Hotis.dll gravenix.dll flex-it.dll sunfan.dll Kaydax.dll GreenStock.dll TamPhase.dll Solo-Dax.dll Newredtrax.dll Drip-Core.dll Tempfax.dll goodhome.dll Nimtip.dll opensing.dll Joylatnix.dll touchzap.dll Rontom.dll Solozestock.dll Physcom.dll single-tech.dll FaseDex.dll aptip.dll coftofresh.dll Goldensonsing.dll Stantam.dll zerjob.dll Zoo-Touch.dll latonstrong.dll Softdax.dll Itdonstrong.dll Biorontam.dll lightdom.dll viatone.dll Ranity.dll Lexilight.dll trisstrong.dll Hatfan.dll UnaEco.dll Trisis.dll Siltough.dll Villaair.dll Year-Dex.dll Movelux.dll Blueplus.dll Saolux.dll Zerit.dll Onto-String.dll Ontophase.dll Transin.dll Vila-Ing.dll Onto-String.dll.quarantined Tripplephase.dll Zumlight.dll Groovejob.dll Ronhold.dll fixtip.dll Ontoron.dll Is-Top.dll Zoocof.dll TempQuadfax.dll Villatraxlab.dll fixdox.dll Airdax.dll Lalex.dll Dalttosoft.dll Vaiaity.dll Vaiadom.dll domfintex.dll Vaiadom.dll.quarantined Yearit.dll rantough.dll Softtam.dll Danity.dll Plus-Stock.dll Mathphase.dll Zummadax.dll Kansing.dll mathlab.dll Flex-Strong.dll VaiaZumfresh.dll Toughnamtax.dll Sumtrax.dll DripTom.dll Icecom.dll Plusnix.dll Voyaex.dll Math-Lax.dll Hattouch.dll Zen-Hold.dll Zumla.dll TinKeytax.dll Movebam.dll lamfan.dll SaoNimlam.dll Geokix.dll Sol-Light.dll IsDubit.dll LotJaystrong.dll Kanstrong.dll Trippleex.dll Hatdox.dll Opetex.dll Tanfax.dll X-air.dll Solair.dll Zimfix.dll scotex.dll Danair.dll Sumlab.dll Keyfan.dll Tantom.dll WarmOttough.dll Joywarm.dll StrongZimhome.dll Zertouch.dll Zertouch.dll.quarantined Singlestrong.dll Goldfan.dll dalthome.dll qvodox.dll Overtouch.dll Mathdax.dll silbam.dll UnaSunstock.dll Xxx-Sonhome.dll x-tam.dll Kintone.dll Medlight.dll Tree-Tax.dll medhotity.dll Jobex.dll Tempzoztam.dll latdex.dll strongnix.dll mathtone.dll Betafax.dll viva-ron.dll Stock-Top.dll Freekeylam.dll Unitam.dll Zonetech.dll Fixtax.dll Tampfax.dll Driping.dll Doning.dll Bamtrax.dll Ventolam.dll Joystrong.dll Quotestock.dll X-strong.dll LamAir.dll konktontough.dll Airquolex.dll Biging.dll SolIs.dll Statron.dll stringdom.dll Medfix.dll tamity.dll TrippleLa.dll HoldZimtop.dll latsolotip.dll keyit.dll Sailin.dll Itdox.dll Zumit.dll RedLa.dll stronglax.dll Groovetax.dll solohome.dll Daltair.dll Holdtam.dll lazunit.dll Fixron.dll TamLab.dll Suntoex.dll Stringex.dll TreeLax.dll SuperIt.dll Kay-Fax.dll Santotech.dll Trustdex.dll Freshfan.dll Ronity.dll Donruntop.dll ScotTraxin.dll Dam-Dax.dll Hottax.dll Tripplezap.dll Zottough.dll K-tam.dll Zathfix.dll S-core.dll Black-Tough.dll Voyalam.dll Xxx--Lux.dll Bamis.dll FaseOzein.dll u-fax.dll Zaamtom.dll Driplux.dll GrooveString.dll Zummadox.dll labhome.dll Runzap.dll Hotkix.dll StrongZap.dll Freshdomfan.dll Zookix.dll K-Lotity.dll Plusfax.dll HotDubcom.dll duotop.dll Vaiaphase.dll Touch-Tech.dll Lotcom.dll Jobflex.dll Labdax.dll Stringit.dll superfax.dll Gold-Tom.dll freestrong.dll Donfix.dll Strongfan.dll Santouch.dll LatOttech.dll Silverphase.dll Doublesollax.dll Moveron.dll Bluefax.dll Fase-Kix.dll tempremtouch.dll ZoomSoloing.dll Openbam.dll Truejob.dll Runtone.dll DingFlex.dll Sonzap.dll Saophase.dll.quarantined HayDoncom.dll holdsanla.dll touchflex.dll pqxdduzc.dll ehkco3h4.dll treslight.dll RunSailjob.dll Bamhold.dll stringbam.dll Blacktech.dll FreshDanphase.dll Volttom.dll Konplus.dll OverJoyzap.dll Dingfind.dll Faxnix.dll Betatop.dll domzimlab.dll matfind.dll zamit.dll Zer-Dax.dll Tresjob.dll zummaanin.dll Sonity.dll Biosoft.dll DongHome.dll Stringdax.dll Issandox.dll opentop.dll Kaystock.dll Dandontouch.dll Dento-Plus.dll Over-Stock.dll Saolab.dll Lotex.dll Tan-Dax.dll Softis.dll Tempcof.dll quolattop.dll K--Kix.dll dingity.dll RedNix.dll Standax.dll Ittough.dll zoomtough.dll sailhome.dll Sansing.dll Toping.dll Hot-Dom.dll Dentodoncom.dll Sum-Plus.dll Saotom.dll physfind.dll Saileco.dll LexiHattrax.dll kinsoft.dll inchfix.dll SingQvolight.dll SoftLight.dll Konranlux.dll Itphase.dll Ladax.dll Tin-Air.dll zoostock.dll Toplux.dll Sanlathome.dll ZumLattone.dll Kinhome.dll Softlam.dll x-trax.dll MedTone.dll Yeardom.dll Dambam.dll donnamlux.dll GraveIn.dll KonkRuneco.dll ZotZooflex.dll trisex.dll holdjob.dll OzerLux.dll Stringlux.dll zontop.dll Scottop.dll Saotax.dll bio-flex.dll Qvotinlight.dll Stronghome.dll Indigotough.dll Dantough.dll Quadzensoft.dll damrantax.dll Strong-Zap.dll Zathbam.dll Xxx-Dom.dll Flexlux.dll Movetrax.dll Funkeydax.dll Rankdontop.dll NewEco.dll singtouch.dll Runsoft.dll techtech.dll Zonezooin.dll Stanfix.dll viahold.dll Zondox.dll Singlesoft.dll TreeTone.dll ZoneLottax.dll Sing-Tom.dll Betasing.dll Nimcore.dll Movestock.dll MoveLex.dll Hotcof.dll Zoomdamfresh.dll TampSoft.dll IndigoSaostock.dll Icefix.dll Subsonin.dll Konksaohome.dll OntoLight.dll fixwarm.dll Saltfax.dll runlab.dll Freshit.dll Toughsoft.dll Geotough.dll Funquostock.dll roundflex.dll Runwarm.dll Zoomfax.dll Sumron.dll K-donhome.dll QuoMattop.dll Jobhatin.dll Zunbam.dll Hotdax.dll viladom.dll Zimozestock.dll TranOzetax.dll Ozerrunis.dll Viva-Lam.dll Airfix.dll Silin.dll donlex.dll Stockstrong.dll Tipzap.dll goodlam.dll FreeSunzap.dll Lamity.dll Xxx-Dex.dll Bigplus.dll stimtouch.dll Tamin.dll Newzap.dll JobTax.dll Sail-Bam.dll Warmhome.dll Cantouch.dll Dentodex.dll Roncore.dll biohotair.dll Gravelam.dll TechFresh.dll villa-strong.dll Zonecore.dll freshhome.dll alphahottrax.dll BlackTom.dll Ran-Flex.dll Aptrax.dll Tanlax.dll ScotIng.dll Run-Light.dll Freshcom.dll toughex.dll GrooveRanflex.dll Unozunit.dll yearhatfresh.dll FixLam.dll lattom.dll kayjaycom.dll An-Soft.dll Viastock.dll Geo-Tone.dll Donbam.dll Finjob.dll unozap.dll unaquoron.dll Zundamis.dll Labkix.dll Trusttonlab.dll Medraning.dll hottone.dll Qvodex.dll Dingdomtam.dll Stringwarm.dll Silverfax.dll Warmkaysoft.dll Hatfresh.dll Conkix.dll Konredron.dll IndigoStock.dll Qvotrax.dll blackdonlex.dll FunTandox.dll tiplab.dll Lateco.dll Opensoft.dll Zuntough.dll Lexilab.dll Redtrax.dll indigohome.dll FixHotplus.dll DentoZozstring.dll Inflex.dll ranhold.dll Meddomlex.dll Don-Nix.dll OzerIty.dll BioAir.dll KonDex.dll Danin.dll Faxcof.dll Zathron.dll touchtom.dll medlux.dll Lexi-Home.dll opentrax.dll Bamsing.dll Strongfind.dll BamDox.dll Softwarm.dll Quotefax.dll Tintonlam.dll kinnix.dll Inkeyfresh.dll OzerJob.dll GeoIt.dll Blackfax.dll zath-ex.dll Bigcof.dll Labfax.dll Flexcof.dll Whitestring.dll latlex.dll Key-Home.dll Medbam.dll vilaplus.dll Labdom.dll Sanovetom.dll Dingtip.dll Joy-In.dll overflex.dll FreshFlex.dll GraveHotstock.dll Singzunsing.dll ConHatcore.dll SaltLamplus.dll Xxx-tax.dll StringSolotech.dll Biolex.dll Statex.dll Labdonsoft.dll quoity.dll Nam-Trax.dll Open-Cof.dll Key-Com.dll Mathhome.dll Phystrax.dll alphala.dll Silverdex.dll Zoning.dll Isin.dll LexiLotnix.dll Jaycore.dll Techfix.dll Singleair.dll Anlux.dll Lexiphase.dll.vir Treswarm.dll.vir Ecoottrax.dll ZunFan.dll Solo-La.dll HotZimdex.dll StatDax.dll Tantop.dll Blackdomplus.dll bluein.dll Statit.dll Flexdom.dll ConIt.dll Goldtom.dll BioDex.dll LatSondom.dll SanRanlax.dll Tripplewarm.dll Sunfresh.dll Kinsandex.dll Donstring.dll Sail-String.dll Tipdinkix.dll Hot-Tam.dll Tresstrong.dll runtam.dll Opening.dll Zoophase.dll Redhotdax.dll Freeranwarm.dll Bigstrong.dll Greenin.dll Rankstrong.dll Treeron.dll Is-Lex.dll LotAir.dll singletrax.dll Zonit.dll Sankix.dll bio-zap.dll s--it.dll Kayhotcore.dll RunIn.dll Voltnix.dll Villatrax.dll Kintough.dll Quoqvodox.dll Techtrax.dll Softsoft.dll GraveTam.dll FlexOzelab.dll Viva-Stock.dll faxtam.dll Silverfan.dll Bigfan.dll Sanlight.dll Istax.dll FinSolotone.dll UnoStock.dll singtrax.dll Quotefind.dll Holdanlam.dll xxx-kix.dll SunToit.dll Yearzunex.dll Dentozap.dll VolZumwarm.dll RoundMatstock.dll Daltphase.dll RedRanfresh.dll K-core.dll KonkOzela.dll Dongit.dll Lamsancof.dll Labhotlab.dll Salttom.dll Transsaobam.dll tempstrong.dll Bamnimfax.dll viakeytone.dll Ozertip.dll Kinflex.dll Faxcom.dll zoom-tip.dll whitedom.dll Move-String.dll Latzooeco.dll Bio-Plus.dll Movekix.dll Triosaoex.dll Joy-Home.dll Cantop.dll runtip.dll Ranplus.dll Flexzap.dll AlphaTax.dll GreenSing.dll Quoair.dll zaamfix.dll RankZamdax.dll Sing-Bam.dll Mat-Tax.dll Freshlex.dll Finstrong.dll Sancom.dll Jaydex.dll MatZunis.dll Fresheco.dll SoloDomtam.dll Statdom.dll Zotdonit.dll Treestock.dll Stancof.dll Zonedanjob.dll Conquotough.dll Zumstring.dll X--Kix.dll freshhotfresh.dll FreshDex.dll Stimfind.dll Lottip.dll RankApdom.dll Bioin.dll Kayfix.dll groovecom.dll techron.dll JayBam.dll Faxlax.dll Indigozootop.dll Xxx-Light.dll Tindox.dll Black-Job.dll Uno-String.dll Don-Dex.dll Apcof.dll Zamhotron.dll Dentoaphome.dll Hotfan.dll Siltax.dll Trustfind.dll.vir Sailgoplus.dll HayOzeit.dll Nimis.dll Tranron.dll Plusdox.dll konk-nix.dll Stimnix.dll Movelab.dll duotom.dll Subfix.dll Zencore.dll Goldenstock.dll Ontoair.dll Openin.dll Openin.dll.quarantined truefan.dll Indigo-Eco.dll FreeAphome.dll Unilax.dll Singhome.dll TrioAir.dll Haystring.dll Danfix.dll StringLax.dll y-lex.dll Transla.dll Newquadla.dll tiptop.dll Zotfix.dll Pluslight.dll konkphase.dll X-Dax.dll FaseTech.dll KayKeywarm.dll K-in.dll Kinla.dll Grooveis.dll LatOteco.dll zuneco.dll Driptip.dll Namkayex.dll fundom.dll Vol-Bam.dll Suntax.dll Scot-Lam.dll Geocore.dll betatraxing.dll techphase.dll VentoIng.dll Danhold.dll Doubletough.dll volttondax.dll Trisstock.dll Funex.dll blacksoft.dll RoundSoft.dll Move-Flex.dll Inchdex.dll Overnix.dll DripNameco.dll OverLex.dll Kaytam.dll Quotephase.dll Funstring.dll zoomcof.dll Ittop.dll black-tax.dll anfix.dll Joytam.dll Singin.dll faxtough.dll opeit.dll Volt-Touch.dll X-light.dll Con-Tough.dll Viva-Warm.dll voltex.dll Roundtop.dll mathdamex.dll Saltlab.dll ZummaStock.dll saltcof.dll X-lex.dll MoveZuneco.dll Redlab.dll Tresstring.dll NewSailex.dll JobSonstrong.dll Meding.dll Conjob.dll Meddax.dll Voyalight.dll YearSaoity.dll namis.dll Zathcore.dll Tresfresh.dll K-hotdex.dll Geonix.dll templux.dll Zamrunhold.dll latrax.dll Quote-Tech.dll Super-Strong.dll Single-Com.dll homedom.dll Candax.dll Dripit.dll Solohold.dll SingleZoolux.dll Dripfix.dll Bamhome.dll qvostrong.dll RedLatlex.dll GraveSing.dll DamDantone.dll vaiatex.dll Stimex.dll Zamplus.dll FunPhase.dll Goldfind.dll Tipit.dll Quotedubcof.dll.vir Over-String.dll LamCantam.dll strongdox.dll Greentone.dll Kanflex.dll reing.dll Flexjob.dll newgojob.dll Singlab.dll Sillight.dll Intouch.dll toughdubcore.dll JayDax.dll Zoolight.dll Stringtech.dll Stringtop.dll FunQuadtough.dll Dongbam.dll ZoomZap.dll transdox.dll TrueSanfan.dll Indigoqvolex.dll Trio-Top.dll Labtax.dll Zamcom.dll Faxfix.dll cofstatflex.dll sundox.dll Kaylotis.dll Bigtom.dll IsLatfresh.dll Cantex.dll Lotlex.dll NamHatla.dll Redfind.dll Hotcof.dll.vir faseplus.dll biosing.dll Vilaeco.dll Vilaeco.dll.quarantined sunity.dll Santrax.dll EcoTamlex.dll Saltsunsing.dll BetaGotex.dll CanLam.dll mathstrong.dll Haylux.dll Joy-Zap.dll Strongphase.dll Geo-Home.dll.bck Blackrandex.dll SpanOvelight.dll.bck ZimLax.dll.bck Freshjaytax.dll ReAir.dll.bck Vivatamcore.dll.bck Warmlux.dll Silvernix.dll.bck Lexiity.dll Voltip.dll.bck Sansaonix.dll.bck Zon-Eco.dll Ventodomlab.dll Whitetanphase.dll fintech.dll NimSancof.dll Sanfind.dll TranRedfresh.dll SubDubing.dll Opefax.dll.bck Zonhotity.dll Lightdax.dll Zotis.dll Inphase.dll Ventodox.dll NimHome.dll Zontouch.dll Trio-Nix.dll Dalthattom.dll Voltdox.dll blackfind.dll Keytouch.dll Sao-Tough.dll.bck haying.dll FreshEx.dll Groove-Eco.dll BlueFan.dll BlackDomdax.dll Geoflex.dll UnaPlus.dll Indigowarm.dll Domtough.dll Singlehome.dll lotphase.dll Fasefind.dll DonLab.dll KonIt.dll Operon.dll BamLamfresh.dll AlphaLex.dll Tamfix.dll Doubledox.dll Dan-Lab.dll Home-Ex.dll Ecois.dll Whitekix.dll Freshtouch.dll Dantax.dll ZunSonsoft.dll Sololax.dll KonkDanlex.dll villasildom.dll rankfresh.dll Constrong.dll StockString.dll TamTip.dll LaDex.dll Joy-Nix.dll Zone-String.dll Zumcore.dll Lighttax.dll DonTech.dll

This hash has been seen with multiple file names. Alternate names can appear when software is updated, copied between folders, packed by an installer, or deliberately renamed to avoid recognition. Compare the exact MD5 above before assuming two names refer to the same file.

Windows 7 74.0%
Windows 8.1 12.4%
Windows 10 10.7%
Windows Vista 1.3%
Windows 8 1.1%
Windows XP 0.5%

The most common operating system signal for DonTech.dll is Windows 7 with 74.0% of observed hits. If your system differs from the common profile, check whether the file was introduced by a specific installer, archive, or removable device.

DonTech.dll is identified as pe for 32-bit systems. The subsystem is Windows GUI. PE header values are useful for triage, especially when they do not match the expected publisher, product, or release timeline.

Format pe
Architecture 32-bit
Subsystem Windows GUI
Entry point 0x00008261
Image base 0x10000000

PE Sections:

Sections 5
Raw data 245760

Section layout highlights raw-size concentration, repeated names, packer markers, and hashes that can be compared across related samples.

.text 178176 bytes · 72.5% of section data
MD5 0e5559ad0d1013b6a26bd88bca4712d9
.rdata 45568 bytes · 18.5% of section data
MD5 0c9f5e67924187a271bd85332cf1c53f
.data 9728 bytes · 4.0% of section data
MD5 12ef2efcbb9771fd458964c0defbf76e
.rsrc 1024 bytes · 0.4% of section data
MD5 06845c2ee7176d5bf9bc7def9842b861
.reloc 11264 bytes · 4.6% of section data
MD5 f04340ce6c8cd8742f321d875eade38d

PE section names and hashes can reveal packing, injected resources, or unusual build artifacts. Sections with uncommon names, very large raw data, or hashes that differ from a trusted copy deserve additional review.

Report conclusion

GridinSoft detects this file as Adware.Agent

This report identifies DonTech.dll by MD5 36cb95e29e20d1b066ec5b8eca6c4d20. If the same file is present on your device, scan the system and remove the detected object after confirming the hash and location.

Download GridinSoft Anti-Malware Scan the device and confirm whether this exact hash is present. Check this hash on VirusTotal

Recommended next steps

  • Compare the local file MD5 with 36cb95e29e20d1b066ec5b8eca6c4d20.
  • Check the file path, publisher, and signature against the details in this report.
  • Run a GridinSoft scan and remove the object if the same hash is found.