How to remove sysproxy-cmd.exe
- File Details
- Overview
- Analysis
sysproxy-cmd.exe
The module sysproxy-cmd.exe has been detected as Risk.Gen
File Details
| MD5: |
50194d772ea2c67e1204323e65452a5e |
| Size: |
64 KB |
| First Published: |
2017-10-01 18:05:58 (6 years ago) |
| Latest Published: |
2019-08-23 13:28:01 (4 years ago) |
| Status: |
Risk.Gen (on last analysis) |
|
| Analysis Date: |
2019-08-23 13:28:01 (4 years ago) |
Overview
| %appdata%\byteexec |
| %appdata% |
| %appdata% |
| %appdata% |
| %appdata% |
| %appdata% |
| %appdata% |
| %appdata% |
| %appdata% |
| %appdata% |
|
62.4% |
|
|
20.5% |
|
|
2.7% |
|
|
2.3% |
|
|
1.5% |
|
|
1.5% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
| Windows 10 |
56.2% |
|
| Windows 7 |
31.3% |
|
| Windows 8.1 |
9.8% |
|
| Windows 8 |
2.6% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000000400000 |
| Entry Address: |
0x000014d0 |
| Name |
Size of data |
MD5 |
| .text |
10752 |
da7f60186e69e9b5ead936b5a49893ba |
| .data |
512 |
f88bf228f56932c8ab731c2298e9dd21 |
| .rdata |
3584 |
2825de7c4e51f0b821f4a57994ed6c5b |
| .pdata |
1024 |
dca85293ffd0c4d954d29c39730aed57 |
| .xdata |
1024 |
371b995966db669a890d02d583ef3b2c |
| .bss |
0 |
00000000000000000000000000000000 |
| .idata |
3072 |
b5ef101ad2f2817e8bc7e2f3f914c2ec |
| .CRT |
512 |
32d6d963a9d0708e530060c190862ec9 |
| .tls |
512 |
26ca4b47cfaf6890e1ff1e4fcdd08978 |
| /4 |
512 |
69329b1d091d0c9b72ce0b1795fe93be |
| /19 |
4096 |
731c2bdfb650ee100d0d420d7cadae46 |
| /31 |
512 |
72348c2a983ab53a2b4bb7b27746e0ac |
| /45 |
512 |
6f4f1a9464fa3eeb33db5b2eacc2ff40 |
| /57 |
512 |
5ceed83b4bab3327693b9eb16ce54a61 |
