How to remove WinMend.Folder.Hidden.2.4.0_Soft98.iR.exe
- File Details
- Overview
- Analysis
WinMend.Folder.Hidden.2.4.0_Soft98.iR.exe
The module WinMend.Folder.Hidden.2.4.0_Soft98.iR.exe has been detected as Trojan.Agent
File Details
| Company Name: |
|
| MD5: |
924e4b0a9026c608955c791358f21e91 |
| Size: |
2 MB |
| First Published: |
2018-07-09 16:19:10 (6 years ago) |
| Latest Published: |
2021-01-10 06:34:59 (4 years ago) |
| Status: |
Trojan.Agent (on last analysis) |
|
| Analysis Date: |
2021-01-10 06:34:59 (4 years ago) |
| %sysdrive% |
| %profile%\downloads |
| %appdata%\zhp\quarantine |
| %mydoc% |
| %localappdata%\packages\microsoft.microsoftedge_8wekyb3d8bbwe\ac\#!001\microsoftedge\cache |
| %profile%\downloads\programs\programs win 10\safety |
| %sysdrive%\نرم افزار |
| %desktop% |
| %sysdrive% |
| %sysdrive%\belgeler 1 |
| WinMend-Folder-Hidden.exe |
| winmend-folder-hidden_2-4-0_fr_311036.exe |
| WinMend-Folder-Hidden[1].exe |
| WinMend.Folder.Hidden.2.4.0_Soft98.iR.exe |
|
15.8% |
|
|
10.5% |
|
|
10.5% |
|
|
10.5% |
|
|
5.3% |
|
|
5.3% |
|
|
5.3% |
|
|
5.3% |
|
|
5.3% |
|
|
5.3% |
|
|
5.3% |
|
|
5.3% |
|
|
5.3% |
|
|
5.3% |
|
| Windows 10 |
80.0% |
|
| Windows 7 |
15.0% |
|
| Windows 8 |
5.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000097f0 |
| Name |
Size of data |
MD5 |
| CODE |
36864 |
19aec1c1a4ef2fb9fe30b219ab07ddb2 |
| DATA |
1024 |
6344b5e22b5b2675be150744885e2671 |
| BSS |
0 |
00000000000000000000000000000000 |
| .idata |
2560 |
563cb4ae07a81b0403d850851e368293 |
| .tls |
0 |
00000000000000000000000000000000 |
| .rdata |
512 |
d293bf8d4ebe9826d58e1d27c25fe4b6 |
| .reloc |
0 |
00000000000000000000000000000000 |
| .rsrc |
10240 |
d74027728f2ce535edb1fc76ca140d92 |
