How to remove logonsession.exe
- File Details
- Overview
- Analysis
logonsession.exe
The module logonsession.exe has been detected as Suspicious Object
File Details
| MD5: |
5f9b8c944e02f483b38b70914d586cdf |
| Size: |
1 MB |
| First Published: |
2021-01-04 10:14:11 (4 years ago) |
| Latest Published: |
2021-01-04 10:14:11 (4 years ago) |
| Status: |
Suspicious Object (on last analysis) |
|
| Analysis Date: |
2021-01-04 10:14:11 (4 years ago) |
Overview
| Signed By: |
JWTS |
| Status: |
Valid |
| Windows Server 2012 R2 |
100.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00027dcd |
| Name |
Size of data |
MD5 |
| .text |
581120 |
ecfe832749ba1e9ec3a8516ad988239e |
| .rdata |
188928 |
c2aa3e117ce35e3c5f0227b153c0cb1b |
| .data |
20992 |
9f9d6f746f1a415a63de45f8b7983d33 |
| .rsrc |
363008 |
6b6907e3a2a13cba72e82966d8594eec |
| .reloc |
29184 |
6fcae3cbbf6bfbabf5ec5bbe7cf612c3 |
