How to remove NtControlSvc.exe
- File Details
- Overview
- Analysis
NtControlSvc.exe
The module NtControlSvc.exe has been detected as Spy.Keylogger
File Details
| Company Name: |
|
| MD5: |
6f63b84c981c87defc57e202287a79df |
| Size: |
3 MB |
| First Published: |
2019-07-26 17:54:57 (6 years ago) |
| Latest Published: |
2022-03-14 23:22:32 (3 years ago) |
| Status: |
Spy.Keylogger (on last analysis) |
|
| Analysis Date: |
2022-03-14 23:22:32 (3 years ago) |
Overview
| %system% |
| %windir%\temp\staffcop |
| %system% |
| %system% |
| %system% |
| Windows 10 |
50.0% |
|
| Windows 7 |
33.3% |
|
| Windows Server 2008 R2 |
16.7% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00142c16 |
| Name |
Size of data |
MD5 |
| .text |
2942464 |
769c1d9d7ef22edf7a9ebb0461493858 |
| .rdata |
622592 |
ab221274f973c44e51cc9735473d8215 |
| .data |
71680 |
2a7778567650aff93fd72fed61c08c81 |
| .idata |
11264 |
48aba316288d46d72a907c436750b592 |
| .rsrc |
70656 |
46e077e8f68084b7794667ce1751ef53 |
