How to remove ucppahelper.exe
- File Details
- Overview
- Analysis
ucppahelper.exe
The module ucppahelper.exe has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
61882f3624adce37f2fe694f7dca4f59 |
| Size: |
1 MB |
| First Published: |
2017-07-24 02:08:55 (7 years ago) |
| Latest Published: |
2017-07-26 04:15:17 (7 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2017-07-26 04:15:17 (7 years ago) |
| %localappdata%\ucbrowser\user data\default\extensions\pbnmnlipmkfkadfcdocgblonoccmolpe\3.1.0_0\bin\pphelper |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x001b2000 |
| Name |
Size of data |
MD5 |
| .text |
937984 |
94ee86c556a30833315b1318511a4c7c |
| .rdata |
299008 |
c9e4db4b749825e46e72897889a427a9 |
| .data |
270848 |
f32e364cf18b327b0bc50622f526b2c3 |
| .rsrc |
38400 |
056732d31047903539de31153af2dab8 |
| .reloc |
136704 |
1f9e2ed48749530160054b2107098c7c |
| fefulqe |
73728 |
07ce1693041f19403d36ccc97161e3ca |
| .text |
179200 |
8c5825587fa8685529b49ed973e034d2 |
