How to remove ProcessClean64.exe
- File Details
- Overview
- Analysis
ProcessClean64.exe
The module ProcessClean64.exe has been detected as PUP.Gen
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
40fc2096fa83224c4e9dcbb9a8940019 |
| Size: |
50 KB |
| First Published: |
2017-05-25 08:01:33 (8 years ago) |
| Latest Published: |
2024-07-29 23:09:46 (a year ago) |
| Status: |
PUP.Gen (on last analysis) |
|
| Analysis Date: |
2024-07-29 23:09:46 (a year ago) |
Overview
| %mydoc%\processclean |
| %desktop%\ffttvg-pc\ffttvg\ffttvg\documents\processclean |
| %profile%\onedrive\문서\processclean |
| %profile%\onedrive\documents\processclean |
| %sysdrive%\system\users\documents |
| %mydoc% |
| %profile%\onedrive\문서 |
| %sysdrive%\●data\documents |
| %sysdrive%\c\my |
| %sysdrive%\documents |
|
95.4% |
|
|
1.3% |
|
|
1.1% |
|
|
0.7% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.2% |
|
| Windows 10 |
57.8% |
|
| Windows 7 |
35.3% |
|
| Windows 8.1 |
6.2% |
|
| Windows 8 |
0.4% |
|
| Windows Server 2012 |
0.2% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x000013ec |
| Name |
Size of data |
MD5 |
| .text |
22016 |
ad1611ebc4526483dd48a268faa17305 |
| .rdata |
10240 |
966d1d061bc9ec615a103ec4b35113b7 |
| .data |
4096 |
c9b1a32ce5934d3e9afaeee54a85174e |
| .pdata |
1536 |
c077a89ff6b0f29d54e22a20520ee6c5 |
| .rsrc |
5120 |
c58c3df684733a24f383abc56d937cad |
| .reloc |
1024 |
bdfccabaf640e0f9938043c5ae49dab6 |
