How to remove procexp64.exe
- File Details
- Overview
- Analysis
procexp64.exe
The module procexp64.exe has been detected as Hijack.Explorer
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
c9f40109b9014540b7abd374c67f2db7 |
| Size: |
1 MB |
| First Published: |
2018-01-11 23:09:57 (7 years ago) |
| Latest Published: |
2018-02-11 15:05:54 (6 years ago) |
| Status: |
Hijack.Explorer (on last analysis) |
|
| Analysis Date: |
2018-02-11 15:05:54 (6 years ago) |
| %sysdrive%\distr\qiq\windows system control center\wscc.3.3.0.0_v2.5.1.0ru.rar\windows system control center |
| %sysdrive%\distr\qiq\nirlauncher package 1.20.19 _ sysinternals suite\nirlauncher.1.20.19.by.punsh.rar\nirlauncherportablepunsh\app\nirlauncher |
| %desktop% |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x000ae184 |
| Name |
Size of data |
MD5 |
| .text |
847360 |
6c43b3ff68f26590c5a463d5c6da3c12 |
| .rdata |
296960 |
de368d684145c7338cb9730739388bb8 |
| .data |
46592 |
7b4889c5c85bfa9b71dff2d268ecff5f |
| .pdata |
30208 |
5cb67d3c687da44e42e55f729294d651 |
| .rsrc |
267776 |
12d2ec3b687cf77baed432a335e4266e |
| .reloc |
5120 |
bd6d3159084a8cdd606ecb61184c168b |
| .data |
15360 |
51d9cd05e94315ccd8b5cfc1d800f5b9 |
