How to remove mpcmd.v1.31.exe
- File Details
- Overview
- Analysis
mpcmd.v1.31.exe
The module mpcmd.v1.31.exe has been detected as Trojan.Bifrose
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
a5e8f96ae0e1900c84a63d3833ef7e1e |
| Size: |
28 KB |
| First Published: |
2018-09-30 20:14:05 (6 years ago) |
| Latest Published: |
2020-06-23 12:32:09 (4 years ago) |
| Status: |
Trojan.Bifrose (on last analysis) |
|
| Analysis Date: |
2020-06-23 12:32:09 (4 years ago) |
| %appdata%\metaquotes\terminal\ccd68bfb06049a8615c607c3f6ad69b7\mql4 |
| %sysdrive%\new folder (3)\tpochart.zip\experts |
| %profile%\downloads\tpo chart\experts |
| %localappdata%\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\localstate\files\s0\8751\attachments\tpochart[16470].zip\experts |
| Windows 10 |
75.0% |
|
| Windows 7 |
25.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00001398 |
| Name |
Size of data |
MD5 |
| .text |
16384 |
bb2c407e5fc53e1c2f4c451637d5ac65 |
| .data |
4096 |
620f0b67a91f7f74151bc5be745b7110 |
| .rsrc |
4096 |
5010b49d842102650802844f4eb8d8e6 |
