How to remove bprotect.exe
- File Details
- Overview
- Analysis
bprotect.exe
The module bprotect.exe has been detected as Adware.Rotbrow
File Details
Product Name: |
|
Company Name: |
|
MD5: |
a74ac411798da32cfc655a9a9f2eb74a |
Size: |
2 MB |
First Published: |
2017-07-27 21:09:36 (7 years ago) |
Latest Published: |
2019-05-08 00:11:40 (5 years ago) |
Status: |
Adware.Rotbrow (on last analysis) |
|
Analysis Date: |
2019-05-08 00:11:40 (5 years ago) |
Overview
Signed By: |
Bit89 Inc. |
Status: |
Invalid (digital signature could be stolen or file could be patched) |
%sysdrive%\!!!!admin\moje dokumenty\ustawienia lokalne\temporary internet files\content.ie5\0fsk8gek |
%localappdata%\microsoft\windows\temporary internet files\content.ie5\at3wk9d9 |
Windows 7 |
66.7% |
|
Windows 10 |
33.3% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x000fa356 |
Name |
Size of data |
MD5 |
.text |
1725952 |
e542ce4100067ecfadab08dc30acbdb7 |
.rdata |
544768 |
de77f30b8c85a28fa5cb01aeb74e882a |
.data |
24576 |
fe8e111304f756e9a04214f5aeee6625 |
.tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
.rsrc |
143360 |
e2f6a21cea0e2cf6400386accb392fed |
.reloc |
122880 |
e86f9c7069bc467e74b8a7a17d2d2c8a |