Gridinsoft Logo

DriverPack-17-Online.exe Trojan Downloader Analysis

Trojan Downloader
Updated on 2024-09-02 (3 months ago)
Checked by Online Virus Scanner
Online Virus Checker v.1.0.185.174
DB Version: 2024-09-02 05:00:33

Trojan.Win32.Downloader.sa

Downloader designed to download and install additional malware onto an infected computer or device. Unlike standalone trojans, downloader trojans do not have a wide range of malicious functions themselves; instead, they serve as a means to deliver other malware onto a victim's system.

File DriverPack-17-Online.exe
Checked 2024-09-02 02:41:42
MD5 1b1dc6120dc6b427c42968886902e2b4
SHA1 c325ee370e7656ee7021fe109b7b0dfe28e582e6
SHA256 c99687e9829de410b66ad7006b0604c3fddb4582050ce205c1d00ff9f309e6b8
SHA512 2fba94b0fb40e3d44979b5b008e48178ede13c2136fa2c3f42e4703f977a732830f51c86bb06349721c7c0b154a842ace95248ef87d76e1028cd8ecf3b0f0e4b
Imphash 61259b55b8912888e90f516ca08dc514
File Size 8827437 bytes

Trojan.Win32.Downloader.sa Removal

Trojan.Win32.Downloader.sa Removal

Gridinsoft has the capability to identify and eliminate Trojan.Win32.Downloader.sa without requiring further user intervention.

  • Start by downloading Gridinsoft Anti-Malware to your computer.
  • Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  • Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  • Click on the "Standard Scan" button.
  • After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  • If prompted, restart your system to complete the removal process.

Portable Executable Info

6265f480ec0a490fb33d9e6f7cf76982
16ec6a18ef315f3fbedef2ddb813a935
69696969cce871b2
Image Base: 0x00400000
Entry Point: 0x00403640
Compilation: 2021-09-25 22:04:50
Checksum: 0x00000000 (Actual: 0x0087887a)
OS Version: 4.0
PEiD: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Sign: The PE file does not contain a certificate table.
Sections: 5
Imports: ADVAPI32, SHELL32, ole32, COMCTL32, USER32, GDI32, KERNEL32,
Exports: 0
Resources: 53

Sections

Name Virtual Address Virtual Size Raw Size MD5 Entropy
.text 0x00001000 0x00006676 0x00006800 d01cd60c08ad4410541807ebc6d4a26f 6.42
.rdata 0x00008000 0x0000139a 0x00001400 8c5edfd8ff9cc0135e197611be38ca18 5.14
.data 0x0000a000 0x00066378 0x00000600 c7e50177934aec2fcddfd0aceaf14b43 4.11
.ndata 0x00071000 0x00090000 0x00000000 d41d8cd98f00b204e9800998ecf8427e 0.00
.rsrc 0x00101000 0x00007398 0x00007400 acb9aa2a0859867ae862af1a2e1d5604 4.48

Leave a comment *

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware