How to remove WinSeven.exe
- File Details
- Overview
- Analysis
WinSeven.exe
The module WinSeven.exe has been detected as Trojan.Agent
File Details
| MD5: |
5a3400c716a0f35b5a5e01edebba8753 |
| Size: |
33 KB |
| First Published: |
2018-07-14 08:20:38 (7 years ago) |
| Latest Published: |
2021-01-13 15:53:42 (4 years ago) |
| Status: |
Trojan.Agent (on last analysis) |
|
| Analysis Date: |
2021-01-13 15:53:42 (4 years ago) |
| %sysdrive% |
| %sysdrive% |
| %sysdrive% |
| %sysdrive%\drivers\include\img |
| %sysdrive%\drivers\tools\ico |
| %sysdrive%\drivers\tools\modules |
| %sysdrive%\drivers\tools |
| %sysdrive%\drivers\include\txt |
| %sysdrive%\drivers |
| %sysdrive%\drivers\include |
| Pakistan |
99.7% |
|
| China |
0.3% |
|
| Windows 10 |
81.2% |
|
| Windows 7 |
18.8% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00001240 |
| Name |
Size of data |
MD5 |
| .text |
4096 |
0592803dc94bc076657fdbb03e017683 |
| .data |
512 |
ee734e54a30bfd02d34ace425df2b5e2 |
| .rdata |
1024 |
8232fce8c34c27786732555478112f94 |
| .bss |
0 |
00000000000000000000000000000000 |
| .idata |
1536 |
7f81ce4d0d821add3c08fa26bf2f14c8 |
| .rsrc |
26112 |
fe2c8c3bc24b1d801d6395beb597952f |
