How to remove iexplore[1].exe
- File Details
- Overview
- Analysis
iexplore[1].exe
The module iexplore[1].exe has been detected as Backdoor.Zegost
File Details
Product Name: |
|
Company Name: |
|
MD5: |
6c7074ee6da3402de5c793c78610c780 |
Size: |
161 KB |
First Published: |
2017-08-16 05:11:09 (7 years ago) |
Latest Published: |
2017-10-07 14:06:00 (7 years ago) |
Status: |
Backdoor.Zegost (on last analysis) |
|
Analysis Date: |
2017-10-07 14:06:00 (7 years ago) |
%sysdrive%\windows |
%system%\config\systemprofile\appdata\local\microsoft\windows\temporary internet files\content.ie5\lixmvqoa |
%system%\config\systemprofile\appdata\local\microsoft\windows\temporary internet files\content.ie5\0ps72r2m |
iexplore.exe |
iexplore[1].exe |
service.exe |
service[1].exe |
Fxugeqkho.exe |
fxugeqkho.exe |
Windows 7 |
66.7% |
|
Windows Web Server 2008 R2 |
33.3% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00014300 |
Name |
Size of data |
MD5 |
.text |
116224 |
ec88d417aa17dc685d4deeb7a937bc6b |
.rdata |
13824 |
814eef5f103f4995fae7d055b8d65d73 |
.data |
31744 |
dfe1323912c07e87074432a3239aae03 |
.rsrc |
2048 |
544e7c992d46b4bc372ecf7efb858d63 |