How to remove wvfilters64.sys
- File Details
- Overview
- Analysis
wvfilters64.sys
The module wvfilters64.sys has been detected as Trojan.Agent
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
9e4363df9974fc5b5591451f61e61a5f |
| Size: |
55 KB |
| First Published: |
2018-01-06 02:02:04 (7 years ago) |
| Latest Published: |
2018-06-16 11:03:43 (6 years ago) |
| Status: |
Trojan.Agent (on last analysis) |
|
| Analysis Date: |
2018-06-16 11:03:43 (6 years ago) |
Overview
| %localappdata%\microsoft\windows |
| %sysdrive%\windows.old\users\user\appdata\local\microsoft\windows |
| Windows 7 |
80.0% |
|
| Windows 10 |
20.0% |
|
Analysis
| Subsystem: |
Native |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x0000c000 |
| Name |
Size of data |
MD5 |
| .text |
24576 |
f2dbeb3a6e1fe69f31a772115fb0b1fc |
| .rdata |
4096 |
d617a728809ae756b215db62336f759a |
| .data |
1024 |
caf1def358ceb0465a9146dbff579ddf |
| .pdata |
1536 |
b4cc969ad79eb1540fb4fa04cf52b740 |
| .gfids |
512 |
64d1f04ee674327483852f238bb2c4a5 |
| PAGE |
1024 |
fc4038515e326810f19098e72359b01f |
| INIT |
3072 |
373a7b2aabf4eeffbfa51e8c8b6f0ff2 |
| .rsrc |
1024 |
9c60e532348dc6638125451dfabe04cc |
| .reloc |
512 |
318975f9c85e40aca40f44650633b38b |
