How to remove winmend-folder-hidden_2-4-0_fr_311036.exe

winmend-folder-hidden_2-4-0_fr_311036.exe

The module winmend-folder-hidden_2-4-0_fr_311036.exe has been detected as Trojan.Agent

winmend-folder-hidden_2-4-0_fr_311036.exe
Remove winmend-folder-hidde

File Details

Company Name:

WinMend.com

MD5: 924e4b0a9026c608955c791358f21e91
Size: 2 MB
First Published: 2018-07-09 16:19:10 (6 years ago)
Latest Published: 2021-01-10 06:34:59 (4 years ago)
Status: Trojan.Agent (on last analysis)
Analysis Date: 2021-01-10 06:34:59 (4 years ago)

Common Places:

%sysdrive%
%profile%\downloads
%appdata%\zhp\quarantine
%mydoc%
%localappdata%\packages\microsoft.microsoftedge_8wekyb3d8bbwe\ac\#!001\microsoftedge\cache
%profile%\downloads\programs\programs win 10\safety
%sysdrive%\نرم افزار
%desktop%
%sysdrive%
%sysdrive%\belgeler 1

File Names:

WinMend-Folder-Hidden.exe
winmend-folder-hidden_2-4-0_fr_311036.exe
WinMend-Folder-Hidden[1].exe
WinMend.Folder.Hidden.2.4.0_Soft98.iR.exe

Geography:

15.8%
10.5%
10.5%
10.5%
5.3%
5.3%
5.3%
5.3%
5.3%
5.3%
5.3%
5.3%
5.3%
5.3%

OS Version:

Windows 10 80.0%
Windows 7 15.0%
Windows 8 5.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000097f0

PE Sections:

Name Size of data MD5
CODE 36864 19aec1c1a4ef2fb9fe30b219ab07ddb2
DATA 1024 6344b5e22b5b2675be150744885e2671
BSS 0 00000000000000000000000000000000
.idata 2560 563cb4ae07a81b0403d850851e368293
.tls 0 00000000000000000000000000000000
.rdata 512 d293bf8d4ebe9826d58e1d27c25fe4b6
.reloc 0 00000000000000000000000000000000
.rsrc 10240 d74027728f2ce535edb1fc76ca140d92

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for winmend-folder-hidden_2-4-0_fr_311036.exe
copyright for information about winmend-folder-hidden_2-4-0_fr_311036.exe