How to remove PCHA.exe.quarantined
- File Details
- Overview
- Analysis
PCHA.exe.quarantined
The module PCHA.exe.quarantined has been detected as PUP.ParetoLogic
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
26b133a5685eed21d8203491372e859d |
| Size: |
4 MB |
| First Published: |
2017-05-25 06:06:40 (7 years ago) |
| Latest Published: |
2020-09-27 15:04:37 (4 years ago) |
| Status: |
PUP.ParetoLogic (on last analysis) |
|
| Analysis Date: |
2020-09-27 15:04:37 (4 years ago) |
Overview
| %programfiles%\paretologic\pcha |
| %programfiles%\paretologic |
| %programfiles% |
| %programfiles%\paretologic |
| %programfiles%\paretologic |
| %programfiles%\paretologic |
| %programfiles%\paretologic |
| %programfiles%\paretologic |
| %programfiles%\paretologic |
| %programfiles%\paretologic |
| PCHA.exe |
| PCHA.exe.quarantined |
|
67.2% |
|
|
15.1% |
|
|
11.8% |
|
|
5.0% |
|
|
0.8% |
|
| Windows 10 |
62.2% |
|
| Windows 8 |
15.1% |
|
| Windows 7 |
11.8% |
|
| Windows Vista |
10.1% |
|
| Windows 8.1 |
0.8% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0026f0c6 |
| Name |
Size of data |
MD5 |
| .text |
3163648 |
3132f3ec2487e943543d7ca45f78b39c |
| .rdata |
752640 |
51bf427879c0564265d2b33718f16cf9 |
| .data |
109568 |
a4cb850f9a9b414a19dca459411632f5 |
| .rsrc |
121856 |
4b091cdf4a1af078a41ed2ead3749f34 |
| .reloc |
239616 |
30257912cf6a7ad44468469f9743efc9 |
