How to remove REGISTRATION WIZARD.EXE
- File Details
- Overview
- Analysis
REGISTRATION WIZARD.EXE
The module REGISTRATION WIZARD.EXE has been detected as Suspicious Object
File Details
Product Name: |
|
Company Name: |
|
MD5: |
5cee4a39a0cafb6bbb00bd7516f2098f |
Size: |
548 KB |
First Published: |
2017-11-06 08:07:35 (7 years ago) |
Latest Published: |
2020-06-15 08:36:24 (4 years ago) |
Status: |
Suspicious Object (on last analysis) |
|
Analysis Date: |
2020-06-15 08:36:24 (4 years ago) |
Overview
%sysdrive%\zv\serverfile |
%sysdrive%\zv |
%sysdrive%\zv |
%sysdrive%\zv |
%sysdrive%\zv |
%sysdrive%\zv |
Windows 10 |
71.4% |
|
Windows 7 |
14.3% |
|
Windows 8.1 |
14.3% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x0001f610 |
Name |
Size of data |
MD5 |
.text |
135168 |
696c836e06ff4166aef0f3008dd542e8 |
.rdata |
24576 |
89432e7735a4a4bba94a0ee2385e69e7 |
.data |
16384 |
f9a6db566f1c16ad6d39fb713c26f61a |
.rsrc |
376832 |
ce909b8755fff41db148b36c59440939 |