Trojan

Trojan-Downloader.Win32.OffLoader.pne malicious file

Malware Removal

The Trojan-Downloader.Win32.OffLoader.pne is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Downloader.Win32.OffLoader.pne virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Trojan-Downloader.Win32.OffLoader.pne?


File Info:

name: 6572969919FF8F92F5B1.mlw
path: /opt/CAPEv2/storage/binaries/e6fd9755fb51835f12008a22d568210a399cb9599c17b996b50c2d376e66d517
crc32: D6789983
md5: 6572969919ff8f92f5b18fa0ca4bbfbf
sha1: 3cf285044fff300105fa43ab83127181ca13498d
sha256: e6fd9755fb51835f12008a22d568210a399cb9599c17b996b50c2d376e66d517
sha512: e374ad78682cf9b4992041ce4dfdba9f80e6bd0ded6b2e66fdf7c3dca18699965fffb627f41110d1b824745beeab3a0df60c92097ab60e5e171aeb3aeeb7f13f
ssdeep: 98304:ykLEoYWh8JAV/VH97F3tlQ+Ft29s4C1eH9a:dtQJAZVdVQ+Ft5o9a
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B6E5F13FF268A13ED5AE1B3245738260997B7A51A81A8C0F07FC384DCF765601E3B656
sha3_384: 1fa8d597a1df1a1d268da5f45446d8182acf620b7f88a7cfdcaf2f3c0db8fd424de74cdfc0aa98d9e3d1c9575a789fa3
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2023-02-15 14:54:16

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName:
FileDescription: Age of History II Trainer.exe Setup
FileVersion:
LegalCopyright:
OriginalFileName:
ProductName: Age of History II Trainer.exe
ProductVersion: 1.0
Translation: 0x0000 0x04b0

Trojan-Downloader.Win32.OffLoader.pne also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.OffLoader.4!c
DrWebTrojan.DownLoad4.15903
MalwarebytesGeneric.Malware/Suspicious
SangforDownloader.Win32.Offloader.V3um
K7AntiVirusRiskware ( 00584baa1 )
AlibabaTrojanDownloader:Win32/OffLoader.07fd1eed
K7GWRiskware ( 00584baa1 )
CrowdStrikewin/malicious_confidence_100% (W)
CyrenW32/OffLoader.B.gen!Eldorado
SymantecTrojan.Gen.MBT
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/TrojanDownloader.Agent.GWO
KasperskyTrojan-Downloader.Win32.OffLoader.pne
AvastWin32:Malware-gen
TencentMalware.Win32.Gencirc.10bf1845
F-SecureTrojan.TR/Downloader.Gen
TrendMicroTROJ_GEN.R002C0DI723
McAfee-GW-EditionBehavesLike.Win32.BadFile.wc
SophosMal/Generic-S
WebrootW32.Trojan.Gen
GoogleDetected
AviraTR/Downloader.Gen
ZoneAlarmTrojan-Downloader.Win32.OffLoader.pne
MicrosoftTrojan:Win32/OffLoader.ASD!MTB
CynetMalicious (score: 100)
VBA32Trojan.Wacatac
Cylanceunsafe
PandaTrj/Chgt.AD
TrendMicro-HouseCallTROJ_GEN.R002C0DI723
IkarusTrojan.Inno.Agent
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Agent.0360!tr
AVGWin32:Malware-gen
Cybereasonmalicious.44fff3
DeepInstinctMALICIOUS

How to remove Trojan-Downloader.Win32.OffLoader.pne?

Trojan-Downloader.Win32.OffLoader.pne removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment