How to remove wintooll.exe
- File Details
- Overview
- Analysis
wintooll.exe
The module wintooll.exe has been detected as Adware.ELEX
File Details
| MD5: |
aab4b7d04c3a29da254f8a0139c4e2c8 |
| Size: |
169 KB |
| First Published: |
2017-05-30 17:11:48 (7 years ago) |
| Latest Published: |
2019-03-19 15:19:37 (5 years ago) |
| Status: |
Adware.ELEX (on last analysis) |
|
| Analysis Date: |
2019-03-19 15:19:37 (5 years ago) |
Overview
| %windir%\temp\wea3452.tmp |
| %windir%\temp\weac2ac.tmp |
| %windir%\temp\wea1306.tmp |
| %windir%\temp\wea153b.tmp |
| %windir%\temp\wea89bb.tmp |
| %windir%\temp\wea7e09.tmp |
| %windir%\temp\wea667e.tmp |
| %windir%\temp\weadd47.tmp |
| %windir%\temp\weab486.tmp |
| %windir%\temp |
|
25.0% |
|
|
18.8% |
|
|
12.5% |
|
|
12.5% |
|
|
6.3% |
|
|
6.3% |
|
|
6.3% |
|
|
6.3% |
|
|
6.3% |
|
| Windows 7 |
66.7% |
|
| Windows 8.1 |
27.8% |
|
| Windows 10 |
5.6% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000026b9 |
| Name |
Size of data |
MD5 |
| .text |
123392 |
9bc378d92bffec12b3b4c76cf5a36a90 |
| .rdata |
25600 |
517a2a3035acd4738f9ea1955669381b |
| .data |
4608 |
f3aee195204901be89b41fb1d536c085 |
| .rsrc |
7680 |
693214e9283b1164620e567353922865 |
| .reloc |
5632 |
3e46557ee7ac1e108d280e3f353c70ee |
