How to remove $RKZC621.sys
- File Details
- Overview
- Analysis
$RKZC621.sys
The module $RKZC621.sys has been detected as Rootkit.Gen
File Details
MD5: |
622fd523a87cb55be0b676a70c64e8f8 |
Size: |
27 KB |
First Published: |
2018-04-04 07:03:40 (5 years ago) |
Latest Published: |
2022-04-26 23:09:45 (2 years ago) |
Status: |
Rootkit.Gen (on last analysis) |
|
Analysis Date: |
2022-04-26 23:09:45 (2 years ago) |
Overview
%system% |
%sysdrive%\adwcleaner\quarantine |
%sysdrive%\$recycle.bin |
%sysdrive%\windows.old\windows\system32 |
%system% |
%system% |
%system% |
%system% |
%system% |
%system% |
WinmonProcessMonitor.sys |
$RKZC621.sys |
$R8BGZNJ.sys |
winmonprocessmonitor.sys |
|
23.0% |
|
|
17.0% |
|
|
5.8% |
|
|
5.7% |
|
|
5.1% |
|
|
4.9% |
|
|
3.3% |
|
|
3.1% |
|
|
3.1% |
|
|
2.6% |
|
|
2.4% |
|
|
2.0% |
|
|
1.6% |
|
|
1.5% |
|
|
1.3% |
|
|
1.3% |
|
|
0.9% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
Windows 7 |
85.6% |
|
Windows 10 |
9.3% |
|
Windows 8.1 |
2.3% |
|
Windows 8 |
2.1% |
|
Windows Vista |
0.4% |
|
Windows Embedded Standard |
0.2% |
|
Windows Embedded 8.1 |
0.2% |
|
Analysis
Subsystem: |
Native |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x0000111d |
Name |
Size of data |
MD5 |
.text |
1536 |
6f22321e800ec345fe31e312d007c06c |
.rdata |
20992 |
ad0cdd052986b02cdc55dd38ce7e03fe |
.data |
512 |
a6f0bc000be7e9d2ff0e4ab36b46280e |
INIT |
1024 |
42b7ea053ecc7598b66f36d2b7f020bf |
.reloc |
1536 |
2c043bee613dfc77ef2025fbd74af540 |