Valorant External.exe Stealer Keylogger Analysis

Stealer Keylogger
Updated on 2024-03-18 (16 days ago)
Checked by Online Virus Scanner
Online Virus Checkerv.1.0.169.174
DB Version:2024-03-18 04:00:25

Spy.Win64.Keylogger.sa

Keylogger is designed to secretly record keystrokes on a computer or mobile device, capturing everything a user types, including sensitive information like passwords and credit card numbers. It can be used by cybercriminals to steal personal and confidential data without the user's knowledge or consent.

FileValorant External.exe
Checked2024-03-18 02:29:36
MD5bf75fb01abcfb3627b77eaed2001bca5
SHA168af361f898df5dd43addae52347c141e332faf1
SHA256f38fd9a79081a6b2da14111d76956003e7655572dd9fefc1d1d724b7c233fe87
SHA512fe8e3c91bb63c7e556987ca6bd1c95ace1b97fe5f957658c2a0b17047716231cf41c16045869416abe0a29bb95aaac0fb40f8d1465fff550ea329a9847175b90
Imphash23c04e41a0d8837cee214d199f10f363
File Size781824 bytes

Spy.Win64.Keylogger.sa Removal

Spy.Win64.Keylogger.sa Removal

Gridinsoft has the capability to identify and eliminate Spy.Win64.Keylogger.sa without requiring further user intervention.

  • Start by downloading Gridinsoft Anti-Malware to your computer.
  • Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  • Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  • Click on the "Standard Scan" button.
  • After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  • If prompted, restart your system to complete the removal process.

Portable Executable Info

Image Base:0x140000000
Entry Point:0x14009fe3c
Compilation:2023-11-25 16:36:46
Checksum:0x00000000 (Actual: 0x000befc9)
OS Version:6.0
PDB Path:C:\Users\roni\Desktop\UC FREE\VAL CHAIR\x64\Release\loader.pdb
PEiD:PE32+ executable (console) x86-64, for MS Windows
Sign:The PE file does not contain a certificate table.
Sections:6
Imports: KERNEL32, USER32, ADVAPI32, IMM32, D3DCOMPILER_47, dwmapi, MSVCP140, ntdll, d3d11, VCRUNTIME140_1, VCRUNTIME140, api-ms-win-crt-stdio-l1-1-0, api-ms-win-crt-utility-l1-1-0, api-ms-win-crt-string-l1-1-0, api-ms-win-crt-heap-l1-1-0, api-ms-win-crt-filesystem-l1-1-0, api-ms-win-crt-time-l1-1-0, api-ms-win-crt-runtime-l1-1-0, api-ms-win-crt-math-l1-1-0, api-ms-win-crt-locale-l1-1-0,
Exports: 0
Resources:1

Sections

Name Virtual Address Virtual Size Raw Size MD5 Entropy
.text 0x00001000 0x000a0b80 0x000a0c00 8ed59520eca9aff45e177122b576633a 5.97
.rdata 0x000a2000 0x00019710 0x00019800 750d2c6cfce28d62bf2439e892aeb7df 6.34
.data 0x000bc000 0x00002560 0x00000a00 50055c5ddfd71e0ed3e269f03a12a756 2.47
.pdata 0x000bf000 0x00003528 0x00003600 fcb0babfea06dcf631a5cd04e98baff9 5.85
.rsrc 0x000c3000 0x000001e8 0x00000200 4ddcbab8aaae10a6872e1399bdcd4e5f 4.77
.reloc 0x000c4000 0x0000039c 0x00000400 8c6780bb4df2c784c0662a54b88d8b46 5.01

Leave a comment*

Share your thoughts or insights about this file. Do you align with our conclusion?

*Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Please Wait...

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware