How to remove wvfilters64.sys
- File Details
- Overview
- Analysis
wvfilters64.sys
The module wvfilters64.sys has been detected as Trojan.Agent
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
0dfb0bf5b34d80207e0f9ca3a8ad73e9 |
| Size: |
55 KB |
| First Published: |
2017-11-20 06:00:54 (7 years ago) |
| Latest Published: |
2019-10-14 17:04:28 (5 years ago) |
| Status: |
Trojan.Agent (on last analysis) |
|
| Analysis Date: |
2019-10-14 17:04:28 (5 years ago) |
Overview
| %localappdata%\microsoft\windows\symbols |
| %localappdata%\microsoft\windows |
| %localappdata%\microsoft\windows |
| Windows 10 |
50.0% |
|
| Windows 7 |
50.0% |
|
Analysis
| Subsystem: |
Native |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x0000c000 |
| Name |
Size of data |
MD5 |
| .text |
24576 |
f2dbeb3a6e1fe69f31a772115fb0b1fc |
| .rdata |
4096 |
c0c7a3e7778754c4d49697694adcf25b |
| .data |
1024 |
caf1def358ceb0465a9146dbff579ddf |
| .pdata |
1536 |
b4cc969ad79eb1540fb4fa04cf52b740 |
| .gfids |
512 |
64d1f04ee674327483852f238bb2c4a5 |
| PAGE |
1024 |
fc4038515e326810f19098e72359b01f |
| INIT |
3072 |
373a7b2aabf4eeffbfa51e8c8b6f0ff2 |
| .rsrc |
1024 |
0bdb39f16f8ceb4e8c4676307a73e491 |
| .reloc |
512 |
318975f9c85e40aca40f44650633b38b |
