How to remove cyberghost.service.exe
- File Details
- Overview
- Analysis
cyberghost.service.exe
The module cyberghost.service.exe has been detected as Ransom.Blocker
File Details
| Company Name: |
|
| MD5: |
0546e80a004a56d4d97a858211bd906d |
| Size: |
66 KB |
| First Published: |
2018-06-18 19:12:22 (6 years ago) |
| Latest Published: |
2020-12-23 19:00:09 (4 years ago) |
| Status: |
Ransom.Blocker (on last analysis) |
|
| Analysis Date: |
2020-12-23 19:00:09 (4 years ago) |
| %programfiles% |
| %profile%\downloads\compressed\12345678\cyberghost.vpn.-rsload.net- |
| %profile%\downloads\cyberghost vpn premium v6.5.1.3377 + crack |
| %profile%\downloads\downloads\cyberghost.vpn.6.5.1.3377.full.multilingual |
| %profile%\downloads\cyberghost vpn 6.5.1.3377 + repack\cyberghost.vpn |
| %temp%\rar$exa3972.4708\cyberghost vpn 6.5.1.3377 + repack\cyberghost.vpn |
| %temp%\rar$exa4320.48838\cyberghost vpn 6.5.1.3377 + repack\cyberghost.vpn |
| %temp%\rar$exa4056.9104\cyberghost vpn 6.5.1.3377 full |
| %temp%\rar$exa3972.4332\cyberghost vpn 6.5.1.3377 + repack\cyberghost.vpn |
| %temp%\rar$exa5016.6975\cyberghost vpn 6.5.1.3377 + repack\cyberghost.vpn |
| CyberGhost.Service.exe |
| cyberghost.service.exe |
| $RJUXR2J.exe |
|
11.3% |
|
|
9.7% |
|
|
8.1% |
|
|
6.9% |
|
|
6.5% |
|
|
5.2% |
|
|
4.4% |
|
|
3.6% |
|
|
3.6% |
|
|
3.6% |
|
|
2.8% |
|
|
2.8% |
|
|
2.4% |
|
|
2.4% |
|
|
2.4% |
|
|
2.0% |
|
|
2.0% |
|
|
2.0% |
|
|
1.6% |
|
|
1.2% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
| Windows 10 |
64.0% |
|
| Windows 7 |
31.0% |
|
| Windows 8.1 |
3.5% |
|
| Windows 8 |
1.2% |
|
| Windows Embedded Standard |
0.4% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00002e5e |
| MVID: |
6b932d2d-0435-432e-85ef-10c5f838e8f1 |
| Name |
Size of data |
MD5 |
| .text |
4096 |
2cb81023083f4a135faf1583a3cd80cd |
| .rsrc |
36864 |
724dc410af28c3c590001ffca8a47de2 |
| .reloc |
512 |
f65d483450ddd9ed95d723c325658feb |
