How to remove cyberghost.exe
- File Details
- Overview
- Analysis
cyberghost.exe
The module cyberghost.exe has been detected as Trojan.Agent
File Details
| Company Name: |
|
| MD5: |
2efe91066c10830da5bf53b57c1aeb09 |
| Size: |
2 MB |
| First Published: |
2018-11-06 15:19:17 (6 years ago) |
| Latest Published: |
2022-08-08 23:33:47 (2 years ago) |
| Status: |
Trojan.Agent (on last analysis) |
|
| Analysis Date: |
2022-08-08 23:33:47 (2 years ago) |
| %profile%\downloads\cyberghost.vpn.6.5.1.3377.sanet.st |
| %programfiles% |
| %sysdrive%\softwares\vpn\cyberghost_6.5.1.3377 |
| %sysdrive%\sistem program |
| %profile%\downloads\cyberghost.vpn.6.5.1.3377 +crack [crackzsoft] |
| %sysdrive%\torrent donwload\cyberghost vpn 6.5.1.3377 + repack\cyberghost.vpn |
| %sysdrive%\$recycle.bin |
| %sysdrive%\programs |
| %sysdrive%\cyberghost vpn 6.5.1.3377 + repack\cyberghost.vpn |
| %sysdrive%\downloads\cyberghost.vpn.6.5.1.3377\crack.7z |
| CyberGhost.exe |
| cyberghost.exe |
| $R95DCLE.exe |
| $R0528JN.exe |
| Russia |
14.2% |
|
| Germany |
14.2% |
|
| Italy |
7.1% |
|
| India |
6.3% |
|
| Spain |
5.5% |
|
| Turkey |
5.5% |
|
| Ukraine |
3.9% |
|
| Poland |
3.9% |
|
| Pakistan |
3.1% |
|
| United States |
3.1% |
|
| France |
3.1% |
|
| Canada |
2.4% |
|
| Algeria |
2.4% |
|
| Mexico |
1.6% |
|
| Philippines |
1.6% |
|
| Latvia |
1.6% |
|
| Nepal |
1.6% |
|
| Romania |
1.6% |
|
| Peru |
1.6% |
|
| Indonesia |
1.6% |
|
| Australia |
1.6% |
|
| United Arab Emirates |
0.8% |
|
| Iran |
0.8% |
|
| Kazakhstan |
0.8% |
|
| Israel |
0.8% |
|
| Czech Republic |
0.8% |
|
| Bolivia |
0.8% |
|
| Egypt |
0.8% |
|
| Netherlands |
0.8% |
|
| Finland |
0.8% |
|
| Brazil |
0.8% |
|
| South Africa |
0.8% |
|
| Ireland |
0.8% |
|
| Singapore |
0.8% |
|
| Albania |
0.8% |
|
| Cuba |
0.8% |
|
| United Kingdom |
0.8% |
|
| Windows 10 |
72.9% |
|
| Windows 7 |
22.5% |
|
| Windows 8.1 |
3.1% |
|
| Windows 8 |
1.6% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x001f338e |
| MVID: |
5bdcfcfc-a7c6-4b11-b8d5-32d5d62b5982 |
| Name |
Size of data |
MD5 |
| .text |
2036736 |
14af84088894ee44106cea8310592b88 |
| .sdata |
512 |
9622f47501d14f8acc014c6bf7fa604f |
| .rsrc |
118272 |
509f62c67417b1bef2fa1bd47cce19ad |
| .reloc |
512 |
135945e5f2d6e0035394125a660dad46 |
