How to remove ntcls_proxy.dll
- File Details
- Overview
- Analysis
ntcls_proxy.dll
The module ntcls_proxy.dll has been detected as PUP.Tencent
File Details
Product Name: |
|
Company Name: |
|
MD5: |
38ff7de04376f998c9633bd6a3a9c579 |
Size: |
157 KB |
First Published: |
2018-05-21 15:03:58 (5 years ago) |
Latest Published: |
2018-06-12 09:14:25 (5 years ago) |
Status: |
PUP.Tencent (on last analysis) |
|
Analysis Date: |
2018-06-12 09:14:25 (5 years ago) |
Overview
%programfiles%\腾讯游戏\crossfire\ntcls |
%sysdrive%\wegame\穿越火线\ntcls |
Analysis
Subsystem: |
Windows CUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x10000000 |
Entry Address: |
0x00016e60 |
Name |
Size of data |
MD5 |
.text |
102912 |
2327c6d2f261dabbb0155bf1ff1628fb |
.rdata |
25088 |
2deee03d10af89a2a4c05a0322a70661 |
.data |
3584 |
fdee0f2782210d8b1eabc55d5ee66573 |
.tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
.rsrc |
1536 |
a9fa8ab6352029e0e75be97a1aa6216d |
.reloc |
10752 |
6d871ab4ce4e6db568533ef844411de5 |