How to remove winlogonview.exe
- File Details
- Overview
- Analysis
winlogonview.exe
The module winlogonview.exe has been detected as Trojan.Kryptik
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
3deacfc29ee386f1e1d3e9af9c92d8f0 |
| Size: |
81 KB |
| First Published: |
2020-12-15 20:12:20 (4 years ago) |
| Latest Published: |
2021-01-15 13:28:24 (3 years ago) |
| Status: |
Trojan.Kryptik (on last analysis) |
|
| Analysis Date: |
2021-01-15 13:28:24 (3 years ago) |
Overview
| %sysdrive%\anwendungen\nirsoft |
| %sysdrive%\userdata\portableprograms\wintools-nirsoft-sysinternals |
| %sysdrive%\проги установленные\винда\rsload.net.nirsoft.package.zip |
| %desktop%\recup bureau 4 terra\iso test\medicat\portableapps\nirlauncher |
| Windows 7 |
50.0% |
|
| Windows 10 |
50.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0000b1da |
| Name |
Size of data |
MD5 |
| .text |
43008 |
468f78274f2c690b5a6e791940509f3a |
| .rdata |
11264 |
c2c914636cc0adadb68ea1852d2f4bb6 |
| .data |
1024 |
d3036509d0d6dc425567c0a0a031ad6d |
| .rsrc |
20992 |
65e6bf8b24c1b46b980db3d863629da7 |
