How to remove makeConfig.exe
- File Details
- Overview
- Analysis
makeConfig.exe
The module makeConfig.exe has been detected as Trojan.Frosparf
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
34a6c717b679ee8a75f1dd95e98ca62e |
| Size: |
20 KB |
| First Published: |
2017-10-26 12:12:00 (7 years ago) |
| Latest Published: |
2024-10-12 23:06:50 (2 months ago) |
| Status: |
Trojan.Frosparf (on last analysis) |
|
| Analysis Date: |
2024-10-12 23:06:50 (2 months ago) |
| %sysdrive%\wmsdk\mtppk12\tools\directmtp\directmtp_xp-wmp10.zip\directmtp_xp-wmp10 |
| %sysdrive%\wmsdk\mtppk12\tools\directmtp\directmtp_xp-wmp10.zip |
| %sysdrive%\windows xp media center files\wmsdk\mtppk12\tools\directmtp\directmtp_xp-wmp10.zip |
| %sysdrive%\$recycle.bin\s-1-5-21-3288564157-3461171535-3911965998-1000\$rheuth3.zip |
| %sysdrive%\wd backup.swstor\brabe\mwqym2fiodcyy2rlndqwnd\volume{03f744f3-1a68-4ab4-9d7c-d0f725694ee4}\wmsdk\mtppk12\tools\directmtp\directmtp_xp-wmp10.zip |
| %windir%\wmdsdk\mtppk12\tools\directmtp\directmtp_xp-wmp10.zip |
| %programfiles%\mtp porting kit\mtppk12\tools\directmtp\directmtp_xp-wmp10.zip |
| %sysdrive%\wmsdk\mtppk12\tools\directmtp\directmtp_xp-wmp10.zip |
| %sysdrive%\wmsdk\mtppk12\tools\directmtp\directmtp_xp-wmp10.zip |
| %sysdrive%\wmsdk\mtppk12\tools\directmtp\directmtp_xp-wmp10.zip |
|
20.3% |
|
|
9.1% |
|
|
4.9% |
|
|
4.2% |
|
|
4.2% |
|
|
4.2% |
|
|
3.5% |
|
|
3.5% |
|
|
3.5% |
|
|
3.5% |
|
|
2.8% |
|
|
2.1% |
|
|
2.1% |
|
|
2.1% |
|
|
2.1% |
|
|
2.1% |
|
|
2.1% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
| Windows 10 |
51.0% |
|
| Windows 7 |
36.6% |
|
| Windows XP |
6.2% |
|
| Windows 8.1 |
5.5% |
|
| Windows Vista |
0.7% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00001240 |
| Name |
Size of data |
MD5 |
| .text |
8192 |
d81e30e17de9bef636b8528841b1ce70 |
| .data |
4096 |
620f0b67a91f7f74151bc5be745b7110 |
| .rsrc |
4096 |
ca783afe83280530afc874b09d1050e2 |
