How to remove UzaktanYardimv3.exe
- File Details
- Overview
- Analysis
UzaktanYardimv3.exe
The module UzaktanYardimv3.exe has been detected as Risk.Ammy
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
8f302247960cc514d3400eab4842e006 |
| Size: |
701 KB |
| First Published: |
2017-09-14 15:08:03 (6 years ago) |
| Latest Published: |
2018-09-12 19:05:33 (5 years ago) |
| Status: |
Risk.Ammy (on last analysis) |
|
| Analysis Date: |
2018-09-12 19:05:33 (5 years ago) |
Overview
| Signed By: |
Ammyy |
| Status: |
Valid |
| %sysdrive%\實用工具軟體 |
| %programfiles%\cdmy |
| %sysdrive%\$recycle.bin\s-1-5-21-77810454-1601411995-2767008434-1001\$r9v9mbd |
| %desktop% |
| %sysdrive%\distr\ammyy_admin\ammyyportable |
| AA.exe |
| UzaktanYardimv3.exe |
| AA_v3 (1).exe |
| yardim.exe |
| AA_v3.exe |
|
28.6% |
|
|
28.6% |
|
|
14.3% |
|
|
14.3% |
|
|
14.3% |
|
| Windows 7 |
57.1% |
|
| Windows 10 |
28.6% |
|
| Windows Server 2012 |
14.3% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00076e6e |
| Name |
Size of data |
MD5 |
| .text |
507904 |
bf25b7d425df7fe27868b01f9b7fff8d |
| .rdata |
69632 |
39cb35837fb1ddba3c62b8911d42b7ee |
| .data |
86016 |
ba3ca03d22eaf49d85c3fdae52819b23 |
| .rsrc |
45056 |
b559dc455ecbfaf4d86919a7e9977c20 |
