How to remove systems.exe
- File Details
- Overview
- Analysis
systems.exe
The module systems.exe has been detected as Trojan.Agent
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
3288c284561055044c489567fd630ac2 |
| Size: |
1 MB |
| First Published: |
2018-02-27 09:11:30 (7 years ago) |
| Latest Published: |
2025-11-03 23:01:26 (2 weeks ago) |
| Status: |
Trojan.Agent (on last analysis) |
|
| Analysis Date: |
2025-11-03 23:01:26 (2 weeks ago) |
| %desktop% |
| %commonappdata%\package cache |
| %desktop%\rdp |
| %commonappdata% |
| %sysdrive% |
| %profile%\downloads\compressed |
| %sysdrive%\script_v3.4\tweak\termsrv |
| %sysdrive%\backups\clientes\cfc\servidor |
| %sysdrive%\0000 |
| %profile%\downloads |
|
42.2% |
|
|
13.9% |
|
|
4.6% |
|
|
3.1% |
|
|
2.7% |
|
|
2.5% |
|
|
2.5% |
|
|
2.1% |
|
|
1.9% |
|
|
1.7% |
|
|
1.7% |
|
|
1.5% |
|
|
1.5% |
|
|
1.4% |
|
|
1.2% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
0.8% |
|
|
0.8% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
| Windows 10 |
69.5% |
|
| Windows 7 |
23.8% |
|
| Windows 8.1 |
3.6% |
|
| Windows Server 2008 R2 |
1.2% |
|
| Windows Server 2016 |
0.8% |
|
| Windows Server 2012 R2 |
0.6% |
|
| Windows 8 |
0.2% |
|
| Windows Embedded 8.1 |
0.2% |
|
| Windows Vista |
0.2% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0004373c |
| Name |
Size of data |
MD5 |
| .text |
267264 |
57f264ff01edf4e371a016c00d257da2 |
| .itext |
8192 |
8c80182b8ffa4ecf701d0e04adade368 |
| .data |
5120 |
f970a38aebc02446dabd332c7538cb51 |
| .bss |
0 |
00000000000000000000000000000000 |
| .idata |
5120 |
42c4746821e0d7b2ede5358725263ab3 |
| .tls |
0 |
00000000000000000000000000000000 |
| .rdata |
512 |
f26e8ed28f135d324c935a3a77a5cc99 |
| .reloc |
24576 |
ae8aa2efa50bb9cef5b61dbfbac527a3 |
| .rsrc |
1148416 |
21d8bea77a489a4370f8d201a8ba9f93 |