How to remove explorer.exe
- File Details
- Overview
- Analysis
explorer.exe
The module explorer.exe has been detected as Backdoor.Fynloski
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
1cb066e5a32b5042c305cc1ba83d5fc9 |
| Size: |
739 KB |
| First Published: |
2017-06-15 19:07:23 (6 years ago) |
| Latest Published: |
2018-02-22 11:04:30 (6 years ago) |
| Status: |
Backdoor.Fynloski (on last analysis) |
|
| Analysis Date: |
2018-02-22 11:04:30 (6 years ago) |
| DarkComet 5.3.1.exe |
| explorer.exe |
| Windows 8.1 |
66.7% |
|
| Windows 7 |
33.3% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0008f888 |
| Name |
Size of data |
MD5 |
| .text |
580096 |
8067456c5dc713997e61924c501c8cb2 |
| .itext |
6656 |
3f63b5c2974302201afb8afa01b8ac10 |
| .data |
15872 |
81fa247370ecc3476b5c17086c0f2024 |
| .bss |
0 |
00000000000000000000000000000000 |
| .idata |
16896 |
cd30ca2b6ff5111155dec94ee29ec186 |
| .tls |
0 |
00000000000000000000000000000000 |
| .rdata |
512 |
c1788dfeb92bbf0cff5aeaeaf1270ff8 |
| .reloc |
35840 |
e55564594dad16a2ca19fb85903b9300 |
| .rsrc |
100352 |
1adc9d3980b181e408e0451c612c3f20 |
