How to remove procexp_RUS.exe
- File Details
- Overview
- Analysis
procexp_RUS.exe
The module procexp_RUS.exe has been detected as Hijack.Explorer
File Details
Product Name: |
|
Company Name: |
|
MD5: |
194b962c38813e5eb5b404e595d9504f |
Size: |
2 MB |
First Published: |
2018-01-11 14:19:05 (7 years ago) |
Latest Published: |
2018-06-06 15:08:49 (6 years ago) |
Status: |
Hijack.Explorer (on last analysis) |
|
Analysis Date: |
2018-06-06 15:08:49 (6 years ago) |
%programfiles%\totalcommander\totalcmd\programm |
%sysdrive%\$recycle.bin\s-1-5-21-4283866200-1194018741-2128457578-1001\$rp8zm6y\process explorer v16.05 rus.rar |
%sysdrive%\$recycle.bin\s-1-5-21-4283866200-1194018741-2128457578-1001\$rp8zm6y\process explorer v16.05 rus |
%sysdrive%\tcpu66\programm |
%programfiles% |
procexp.exe |
procexp_RUS.exe |
procexp_rus.exe |
Windows 10 |
80.0% |
|
Windows 7 |
20.0% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x0009516e |
Name |
Size of data |
MD5 |
.text |
711680 |
394a7f4b396f15b1611cc5dd534dc08d |
.rdata |
154624 |
b250ff6f2a61893d4f3aa4c6b022f56c |
.data |
37376 |
c2a5a44ca6ba99fe73f81bb7fc82dbd8 |
.rsrc |
1654272 |
e7ba7015daa6f7bc29fe6451bf56176a |
.reloc |
47616 |
425501fb89f324c5269aa6f35031eb72 |
.data |
12288 |
2d7030fdc7d7a75c67f7a5343e917445 |