How to remove XSFVDDZMBV.exe
- File Details
- Overview
- Analysis
XSFVDDZMBV.exe
The module XSFVDDZMBV.exe has been detected as Trojan.Skeeyah
File Details
| Product Name: |
|
| MD5: |
b0a18c89b420152339778d334c30c800 |
| Size: |
53 KB |
| First Published: |
2017-09-27 03:08:19 (7 years ago) |
| Latest Published: |
2018-06-20 09:07:26 (6 years ago) |
| Status: |
Trojan.Skeeyah (on last analysis) |
|
| Analysis Date: |
2018-06-20 09:07:26 (6 years ago) |
| %localappdata%\fe1d64c1fb8746ae823b50de58071234 |
| %localappdata%\21bbdab5ed7f498da8520781c35ba5c6 |
| %localappdata%\281906986b8b4198ad436412e0c9a5c0 |
| %appdata%\8e6a6a2e32b64428a78e340c92d9cdf5 |
| %appdata%\117192ddcb9d4fab82c6704e0bb6d5f2 |
| %commonappdata%\51bbf127fd474c60a1c6621080eb935d |
| %localappdata%\f49d88f6853b44a69bb6d6ac281d402b |
| %localappdata%\9f8275e1448d469c8ac27b0e6c07f844 |
| %appdata%\60d8c1d01fa7498d8c1378ece87b0c2e |
| %temp% |
| VLSNLXXQKC.exe |
| XSFVDDZMBV.exe |
| SVKVCSFXZX.exe |
| UOBLOTSZXO.exe |
| CFHKVPXOML.exe |
| FRMPSNWLOM.exe |
| HFIOWDCTZB.exe |
| GUETSFYSVI.exe |
| KJOKFJAALM.exe |
| PSEHPVMWWX.exe |
| AJUGWEIVPN.exe |
| MKUEGNMUIH.exe |
|
21.4% |
|
|
21.4% |
|
|
14.3% |
|
|
14.3% |
|
|
14.3% |
|
|
7.1% |
|
|
7.1% |
|
| Windows 7 |
64.3% |
|
| Windows 10 |
28.6% |
|
| Windows 8.1 |
7.1% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0000dd8e |
| MVID: |
11e76624-a408-4cfe-a9a4-cc7d3dfcdf80 |
| Typelib ID: |
e4de158d-e2f7-42e9-93e3-81feebd105ae |
| Name |
Size of data |
MD5 |
| .text |
48640 |
7dd330ece96bed8b0830f3604a983fb7 |
| .sdata |
1024 |
24a2754911f557226fdac89e477bcf22 |
| .rsrc |
3072 |
c2f432e0b913bc371e100eecfda37274 |
| .reloc |
512 |
de53b09d5412667656c6ac728307fc76 |
