How to remove WINZIP32.EXE
- File Details
- Overview
- Analysis
WINZIP32.EXE
The module WINZIP32.EXE has been detected as Hijack.Explorer
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
0f33994b64d1e030591babe1cb065e75 |
| Size: |
5 MB |
| First Published: |
2018-03-27 02:10:53 (7 years ago) |
| Latest Published: |
2024-09-03 23:01:10 (9 months ago) |
| Status: |
Hijack.Explorer (on last analysis) |
|
| Analysis Date: |
2024-09-03 23:01:10 (9 months ago) |
Overview
| %programfiles% |
| %programfiles%\winzip |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
|
40.0% |
|
|
26.7% |
|
|
13.3% |
|
|
13.3% |
|
|
6.7% |
|
| Windows 10 |
73.3% |
|
| Windows 7 |
26.7% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00105baa |
| Name |
Size of data |
MD5 |
| .text |
1736704 |
30e4dda380fff8e026e472abcfe94d60 |
| INIT_TEX |
4096 |
2a1600f5d28a556336c4c374f246dc8e |
| .rdata |
327680 |
fd3f889f3d21e94758cd0a44cab69ca6 |
| .data |
45056 |
fba6bb96aa8cc27c5bc6ae88d7c83327 |
| .rsrc |
3080192 |
269fcb9a8ea71ce546131cfb1c649e38 |
| .reloc |
151552 |
d7f3d3c85c6702dacbdbb667e7874870 |
