How to remove ctrl.exe
ctrl.exe
The module ctrl.exe has been detected as PUP.Keylogger
File Details
| MD5: | 69604cd8e9e05ba0e5e36d67e95cf9ba |
| Size: | 414 KB |
| First Published: | 2017-05-25 12:06:59 (7 years ago) |
| Latest Published: | 2019-03-16 13:55:04 (5 years ago) |
| Status: | PUP.Keylogger (on last analysis) | |
| Analysis Date: | 2019-03-16 13:55:04 (5 years ago) |
Overview
| Signed By: | NOVYE SISTEMY, OOO |
| Status: | Valid |
Common Places:
| %sysdrive%\windows |
| %windir% |
| %commonappdata% |
| %sysdrive%\naodeletar\desktop\tudo\apps |
| %commonappdata% |
| %windir% |
| %windir% |
File Names:
| runkey.exe |
| ctrl.exe |
| iran.exe |
| sas.exe |
Geography:
| 28.0% | ||
| 10.7% | ||
| 9.3% | ||
| 8.0% | ||
| 6.7% | ||
| 5.3% | ||
| 5.3% | ||
| 4.0% | ||
| 2.7% | ||
| 2.7% | ||
| 2.7% | ||
| 2.7% | ||
| 2.7% | ||
| 1.3% | ||
| 1.3% | ||
| 1.3% | ||
| 1.3% | ||
| 1.3% | ||
| 1.3% | ||
| 1.3% |
OS Version:
| Windows 10 | 58.7% | |
| Windows 7 | 29.3% | |
| Windows 8.1 | 12.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x00001000 |
PE Sections:
| Name | Size of data | MD5 |
| 90624 | 6514a9427caeed1ffabaf8ed0ac59a86 | |
| 1536 | 30135c0136e1022b218c3c22f911297e | |
| 1536 | 59ddac8ccd7dd30f1eba27e7a8bcca1a | |
| 0 | 00000000000000000000000000000000 | |
| 3584 | 31d3ca93d8f57c7c73935e0106d5447a | |
| 0 | 00000000000000000000000000000000 | |
| 512 | 390da1fab3dcda316f5d3bf5c21811f2 | |
| 0 | 00000000000000000000000000000000 | |
| .rsrc | 6656 | a7ab4c93e65803d8be52156e9b873a28 |
| .data | 312832 | 69bbb15770b271d0bdd31549e62f4869 |
| .adata | 0 | 00000000000000000000000000000000 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for ctrl.exe
