How to remove etebCore-2.x64.dll
- File Details
- Overview
- Analysis
etebCore-2.x64.dll
The module etebCore-2.x64.dll has been detected as Trojan.Agent
File Details
| MD5: |
24aa99837d14bee5da2e2339b07f9d4c |
| Size: |
138 KB |
| First Published: |
2017-07-18 23:06:47 (6 years ago) |
| Latest Published: |
2024-03-23 23:02:32 (3 weeks ago) |
| Status: |
Trojan.Agent (on last analysis) |
|
| Analysis Date: |
2024-03-23 23:02:32 (3 weeks ago) |
| %appdata%\ltdltd61\ea |
| %sysdrive%\windows.old\users\toshiba\appdata\local\temp\305576 |
| %sysdrive%\windows.old\users\toshiba\appdata\local\temp\2510001 |
| %sysdrive%\windows.old\users\toshiba\appdata\local\temp\312898 |
| %temp%\57368793 |
| %temp%\5340566 |
| %temp%\35109126 |
| %temp%\12478602 |
| %temp%\57754897 |
| %temp%\452601 |
|
49.2% |
|
|
16.3% |
|
|
5.9% |
|
|
4.7% |
|
|
3.8% |
|
|
3.4% |
|
|
3.2% |
|
|
1.8% |
|
|
1.2% |
|
|
1.0% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.5% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.3% |
|
|
0.3% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
| Windows 7 |
86.1% |
|
| Windows 10 |
4.9% |
|
| Windows XP |
3.9% |
|
| Windows Server 2008 R2 |
3.4% |
|
| Windows 8.1 |
1.0% |
|
| Windows Vista |
0.4% |
|
| Windows Server 2012 R2 |
0.1% |
|
| Windows Web Server 2008 R2 |
0.1% |
|
| Windows 8 |
0.1% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000180000000 |
| Entry Address: |
0x0001c114 |
| Name |
Size of data |
MD5 |
| .text |
112128 |
dd600773822fcb47b6ee603113055593 |
| .rdata |
10752 |
c0229522a0de7eac2dfb420e589e5ae0 |
| .data |
12800 |
9110d42dcae86b77698bb3abd291d9e7 |
| .pdata |
4096 |
f61552ef19d403939d22a553f42a3aa0 |
| .reloc |
1024 |
0f9a142d80eb58611f09b053d828f1dc |
