How to remove mscorsv.exe
- File Details
- Overview
- Analysis
mscorsv.exe
The module mscorsv.exe has been detected as Trojan.Skeeyah
File Details
Product Name: |
|
Company Name: |
|
MD5: |
128776d60bbfd4f3c1ca8578825a83ff |
Size: |
5 MB |
First Published: |
2017-09-07 17:12:18 (7 years ago) |
Latest Published: |
2021-03-16 21:12:03 (4 years ago) |
Status: |
Trojan.Skeeyah (on last analysis) |
|
Analysis Date: |
2021-03-16 21:12:03 (4 years ago) |
%windir%\microsoft.net\framework |
%windir%\microsoft.net |
%windir%\microsoft.net |
%windir%\microsoft.net |
%windir%\microsoft.net |
%windir%\microsoft.net |
%windir%\microsoft.net |
|
26.3% |
|
|
21.1% |
|
|
10.5% |
|
|
10.5% |
|
|
10.5% |
|
|
5.3% |
|
|
5.3% |
|
|
5.3% |
|
|
5.3% |
|
Windows 10 |
55.0% |
|
Windows 7 |
45.0% |
|
Analysis
Subsystem: |
Windows CUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x000014e0 |
Name |
Size of data |
MD5 |
.text |
119296 |
db919dff625e839ed4449d06e2aa3f76 |
.data |
19968 |
3db5f3ab8f78404038eda14e6c4fa873 |
.rdata |
24064 |
5b4d52d54e1842f85370675c58a845ff |
.bss |
0 |
00000000000000000000000000000000 |
.idata |
4608 |
86725fe344aae6345c2758151026b977 |
.CRT |
512 |
23cd7ded98ac9e0d5910266591ff32da |
.tls |
512 |
aa0566328e2f6947a6849bc400467a65 |
.rsrc |
6046208 |
e2b0753565c183f8eedec55cf678ea24 |