Information about roboot.exe.vir
- File Details
- Overview
- Analysis
roboot.exe.vir
File Details
Product Name: |
|
MD5: |
4c51b816c603ca23d38eb69d1d18cc82 |
Size: |
17 KB |
First Published: |
2017-05-24 20:02:49 (7 years ago) |
Latest Published: |
2020-09-09 00:56:50 (4 years ago) |
Status: |
Undefined (on last analysis) |
|
Analysis Date: |
2020-09-09 00:56:50 (4 years ago) |
Overview
%windir%\system32 |
%system% |
%sysdrive%\adwcleaner\quarantine\c\windows |
%sysdrive%\system volume information\_restore{293761a0-a64a-4668-9455-0680934f3fb8} |
%system% |
roboot.exe |
roboot.exe.vir |
|
55.0% |
|
|
15.0% |
|
|
10.0% |
|
|
5.0% |
|
|
5.0% |
|
|
5.0% |
|
|
5.0% |
|
Windows 7 |
85.0% |
|
Windows XP |
10.0% |
|
Windows 10 |
5.0% |
|
Analysis
Subsystem: |
Native |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x01000000 |
Entry Address: |
0x000025ac |
Name |
Size of data |
MD5 |
.text |
8192 |
95d4091ad383ede8bef3ab4bf5b52a2b |
.data |
512 |
563629f165a1b00ba1c92b2b4adf94bb |
.rsrc |
1536 |
f7cba55eb7cbdf921d506f72d5bd517e |
.reloc |
512 |
bd5709e76a2cee81f5abc248ba5b5358 |