Disagree with this determination?
Associated Malware Groups
The filename is associated with the malware group:
File Behavior
WINFILE.EXE has been seen to perform the following behavior:
- This Process Contains User Mode Rootkit Functionality and can hide itself from the running process list
- Found on infected systems and resists interrogation by security products
- Uses low level functions to hide itself from the user and from system/security processes
- The Process is packed and/or encrypted using a software packing process
WINFILE.EXE has been the subject of the following behavior:
- Deleted as a process from disk
- Created as a process on disk
- Executed as a Process
- Added as a Registry auto start to load Program on Boot up
Country Of Origin
The filename WINFILE.EXE was first seen on May 14 2007 in the following geographical regions of the Prevx community:
- The United States on May 14 2007
- France on May 14 2007
File Name Aliases
WINFILE.EXE can also use the following file names:
- MSTRAY.EXE
- COLOR_01.EXE
- COLOR_02.EXE
- AR.EXE
- JUEGOS DE CARTASCFG.EXE
- JUEGOS DE CARTASFONDS.EXE
- JUEGOS DE CARTASSAVE.EXE
- JUEGOS DE CARTASTETE.EXE
- CABEZA.EXE
- CAPTURAS.EXE
- PING PONG 3D.EXE
- ANUMAN INTERACTIVE.EXE
- JUEGOS_G.EXE
- ANTONIA.EXE
- AVENTURA.EXE
- ALEX RIQUELME.EXE
- MAXWINFILE.EXE
- NEEWINFILE.EXE
- LANGUAGE.EXE
- BLOCKS.EXE
- I-WORM.RAYS.EXE
- ASR/ASR.EXE
- ASR/INCLUDES/INCLUDES.EXE
- ASR/INSTALL/INSTALL.EXE
- MSHELP.EXE
- NLLIJ.EXE
- MAPWINFILE.EXE
- COMMON FILES.EXE
- PROGRAM FILES.EXE
- WESOĊE PRZEDSZKOLE REKSIA.EXE
- DBBXY.EXE
- PULPIT.EXE
- GODWINFILE.EXE
- DRMWINFILE.EXE
- JA.EXE
- US.EXE
- GTA SAN ANDREAS.EXE
- WIE[.EXE
- PROFILES.EXE
- UNDERWORLD.RISE.OF.THE.LYCANS.2009.DVDSCR.SUBPL.RMVBHUNTERS.EXE
- RESURRECTING.THE.CHAMP.EXE
- RESURRECTING[1].THE.CHAMP.2007.PROPER.DVDRIP.XVID-SUNSPOT.EXE
- ANIMAL.2_WWW.DARMOWEFILMY.EU.EXE
- EVIL_DEAD_2_-_MARTWE_Z_O_2__LEKTOR_PL_[n].EXE
- STEPHEN KING - IT.EXE
- RSRC.EXE
- PROMO_CLUB.EXE
- PRODIGY_-_ALWAYS_OUTNUMBERED_NEVER_OUTGUNNED_2004.EXE
- CAMPAIGN.EXE
- WP[1].PL.RMVB.EXE
- ONLINE GAME.EXE
- ART.EXE
- GOOGLE.EXE
- DELUXE SKI JUMP 3.EXE
- DOCS.EXE
- DOWNLOADS.EXE
- MOJE DOKUMENTY.EXE
- MY DOWNLOADS.EXE
- CALL12.EXE
- UNREAL.EXE
- DEVIANCE.EXE
- PUSTYNIA.EXE
- WRESTLER.EXE
- VA-PROMO_ONLY_MAINSTREAM_CLUB_FEBRUARY-2CD-2009.EXE
- RESIDENT.EVIL-DEGENERATION[2008]RIPED MOSQ.EXE
- GALLERY.EXE
- SLUMDOG.MILLIONAIRE.DVDSCR.EXE
Filesizes
This file has been seen with the following file size:
Vendor, Product and Version Information
A file with the name WINFILE.EXE have been seen to have the following Vendor, Product and Version Information in the file header:
File Type
The filename WINFILE.EXE refers to an executable program.