How to remove pscp.exe
pscp.exe
The module pscp.exe has been detected as Trojan.Emotet
File Details
| Product Name: | PuTTY suite |
| Company Name: | Simon Tatham |
| MD5: | 3319b1a422c785c221050f1152ad77cb |
| Size: | 612 KB |
| First Published: | 2018-08-03 13:07:27 (6 years ago) |
| Latest Published: | 2018-08-07 04:12:29 (6 years ago) |
| Status: | Trojan.Emotet (on last analysis) | |
| Analysis Date: | 2018-08-07 04:12:29 (6 years ago) |
Overview
| Signed By: | Simon Tatham |
| Status: | Valid |
Common Places:
| %programfiles% |
| %programfiles%\wscc3\other utilities |
Geography:
| 23.1% | ||
| 17.9% | ||
| 7.7% | ||
| 5.1% | ||
| 5.1% | ||
| 5.1% | ||
| 5.1% | ||
| 5.1% | ||
| 2.6% | ||
| 2.6% | ||
| 2.6% | ||
| 2.6% | ||
| 2.6% | ||
| 2.6% | ||
| 2.6% | ||
| 2.6% | ||
| 2.6% | ||
| 2.6% |
OS Version:
| Windows 10 | 69.0% | |
| Windows 7 | 26.2% | |
| Windows 8.1 | 4.8% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 64 |
| Image Base: | 0x0000000140000000 |
| Entry Address: | 0x00075980 |
PE Sections:
| Name | Size of data | MD5 |
| .00cfg | 512 | d461d6e5a76360cad760f2536fcf3c11 |
| .rdata | 124416 | 9fecd52c80d292da6e01982849c3b25b |
| .bss | 0 | 00000000000000000000000000000000 |
| .data | 3584 | 59a61e94261bbf1bd67bfddd7c03cba1 |
| .gfids | 512 | ce6cf412c4ecdda416a2759b1ae4709d |
| .pdata | 17408 | 37195933c960646b22ce7decfd5ab77d |
| .rsrc | 5632 | af8f2fd96c8897b8b7e927e182ed35e3 |
| .text | 430080 | 2dd14f974b68b4b293983aeb1d9ee578 |
| .xdata | 22016 | 646234843a1b3910d0241659d7371a7e |
| .idata | 5120 | 62986123ba177db4d9ab6b2dc95e503c |
| .reloc | 4096 | 04fc3ac65e5e0d6db9b002a0562fd2fd |
More information:
Download GridinSoft
Anti-Malware - Removal tool for pscp.exe
