How to remove UnderOneWing.exe

UnderOneWing.exe

The module UnderOneWing.exe has been detected as Trojan.Downloader

UnderOneWing.exe
Remove UnderOneWing.exe

File Details

Product Name:

TVP(KIRIKIRI) Z core / Scripting Platform for Win32
MD5: 251699feebe192457efab18f8bd88a15
Size: 4 MB
First Published: 2023-05-15 23:54:39 (2 years ago)
Latest Published: 2023-05-15 23:54:39 (2 years ago)
Status: Trojan.Downloader (on last analysis)
Analysis Date: 2023-05-15 23:54:39 (2 years ago)

Common Places:

%sysdrive%\games files\visual novels

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0023b053

PE Sections:

Name Size of data MD5
.text 2873344 1e6428883876aa901ecd3f2ccdcbec6d
.adata 1536 829658b5dc4f0fcd5c975d52f9ec439e
.rdata 968704 95559d1e1e8c948151c19ba79aa155c8
.data 41472 91b99cb7f4b95243f68256046c25b14d
.rsrc 180736 2a7427005bb6cb4aac9d00eeb99a0bb5
.reloc 307712 d81e063300ff1f88600808bf119cfb04

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for UnderOneWing.exe
copyright for information about UnderOneWing.exe