| File Name | JDownloader_74769.exe |
| File Type |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| Scanner Version | 1.0.231.174 |
| Database Version | 2025-12-12 14:00:20 UTC |
Malware family: Adload
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
e25a3b7d378e072c1890401e459ecf04
|
|
| SHA1 |
605001755408ebe0324b54b16f65abb05b9df849
|
|
| SHA256 |
8da47fb04a96f5d92b71ae726e8b465633c1fe4213fd48e3e648337d1d8f64c1
|
|
| SHA512 |
4fff1b73f59315f825a00382e1a096b9280917911e1a9348ef637e58131e863f8d8a759660768bd938ef1ba52a74e67193d3881071473a00f04fc375a84b5321
|
|
| ImpHash |
12a25084311a13d839f0501709ae38ba
|
| Icon |
Hash: e70ab6434b901bf0d86cad4f2e381b4b
Fuzzy: c0aeeb48c2783a270a993faae44e6ec1 dHash: 00b28eabababa600 |
| Image Base | 0x00400000 |
| Entry Point | 0x00518102 |
| Compilation Time | 2025-02-22 10:51:19 |
| Checksum | 0x01c0c79c (Actual: 0x01c0c79c) |
| OS Version | 6.0 |
| PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| Digital Signature | OK |
| Imports |
9 libraries
KERNEL32, USER32, ADVAPI32, SHELL32, ole32, OLEAUT32, WS2_32, CRYPT32, WLDAP32 |
| Exports | 1 functions |
| Resources | 25 Resources |
| Sections | 5 Sections |
| CompanyName | Overjoyed Team |
| FileDescription | JDownloader Install: Overjoyed Team |
| FileVersion | 1.0.0.1 |
| ProductVersion | 1.0.0.1 |
| LegalCopyright | Copyright 2010-2024 Overjoyed Team |
| ProductName | JDownloader Install: Overjoyed Team |
| Translation | 0x0409 0x04b0 |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
1,569,725 bytes | 1,569,792 bytes | 6.35 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
8DFFD397EC4D2A0C16D625F892514B1E |
.rdata |
0x00181000 |
125,503 bytes | 125,952 bytes | 5.50 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
D501EAF54C2DD9DB47EB712C177D52ED |
.data |
0x001a0000 |
32,988 bytes | 6,656 bytes | 3.76 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
FEC20FF93D1008E97F4A1D1FEE9D411A |
.rsrc |
0x001a9000 |
9,528 bytes | 9,728 bytes | 3.84 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
5D973502F01CD012EEB36F71A6BC8E9F |
.reloc |
0x001ac000 |
51,802 bytes | 52,224 bytes | 5.41 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
D1A1B882FD02D239093FBE16BFF91186 |
| Resource Type | Count | Total Size | Percentage |
|---|---|---|---|
| RT_ICON | 2 | 1,040 bytes | |
| RT_DIALOG | 4 | 2,048 bytes | |
| RT_STRING | 16 | 2,766 bytes | |
| RT_GROUP_ICON | 1 | 34 bytes | |
| RT_VERSION | 1 | 708 bytes | |
| RT_MANIFEST | 1 | 1,502 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
OK
Gridinsoft has the capability to identify and eliminate Adware.Win32.Adload.cl without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!