How to remove A0037433.exe
- File Details
- Overview
- Analysis
A0037433.exe
The module A0037433.exe has been detected as Adware.Downloader
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
14ba143e4b40a1e1f184a9fe8ca1f2ad |
| Size: |
1 MB |
| First Published: |
2017-06-08 13:12:35 (7 years ago) |
| Latest Published: |
2020-12-16 07:10:00 (4 years ago) |
| Status: |
Adware.Downloader (on last analysis) |
|
| Analysis Date: |
2020-12-16 07:10:00 (4 years ago) |
Overview
| %localappdata%\catalinagroup\citrio\application\50.0.2661.276\installer |
| %profile%\dministrateur\local settings\application data\catalinagroup\citrio\application\50.0.2661.276\installer |
| %sysdrive%\system volume information\_restore{707e28ae-030b-44df-b89d-07076ebdcb41}\rp269 |
| %localappdata%\catalinagroup\citrio\application\50.0.2661.276 |
| %profile%\ous\local settings\application data\catalinagroup\citrio\application\50.0.2661.276 |
| %sysdrive%\windows.old\users\samuel\appdata\local\catalinagroup\citrio\application\50.0.2661.276 |
| %localappdata%\catalinagroup\citrio\application\50.0.2661.276 |
| %localappdata%\catalinagroup\citrio\application\50.0.2661.276 |
| %localappdata%\catalinagroup\citrio\application\50.0.2661.276 |
| %localappdata%\catalinagroup\citrio\application\50.0.2661.276 |
| Brazil |
20.9% |
|
| United States |
8.1% |
|
| Taiwan |
8.1% |
|
| Thailand |
7.0% |
|
| Egypt |
4.7% |
|
| Poland |
4.7% |
|
| Greece |
4.7% |
|
| Vietnam |
3.5% |
|
| Canada |
3.5% |
|
| Indonesia |
2.3% |
|
| Algeria |
2.3% |
|
| Argentina |
2.3% |
|
| Saudi Arabia |
2.3% |
|
| Sweden |
2.3% |
|
| Jordan |
2.3% |
|
| Spain |
1.2% |
|
| Turkey |
1.2% |
|
| India |
1.2% |
|
| Portugal |
1.2% |
|
| Belarus |
1.2% |
|
| Iran |
1.2% |
|
| Hungary |
1.2% |
|
| Morocco |
1.2% |
|
| Nicaragua |
1.2% |
|
| Libya |
1.2% |
|
| Syria |
1.2% |
|
| Mexico |
1.2% |
|
| Iraq |
1.2% |
|
| Malaysia |
1.2% |
|
| Venezuela |
1.2% |
|
| Australia |
1.2% |
|
| Mozambique |
1.2% |
|
| United Kingdom |
1.2% |
|
| Windows 10 |
50.0% |
|
| Windows 7 |
31.4% |
|
| Windows 8.1 |
14.0% |
|
| Windows XP |
3.5% |
|
| Windows 8 |
1.2% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00074ee3 |
| Name |
Size of data |
MD5 |
| .text |
589312 |
98ef7a18d29e369c21564ed1d11b730d |
| .rdata |
166912 |
dd41ba6f40c7df08a0a62c6a2ac9dad0 |
| .data |
7680 |
e95efabb8c69ba82af7bf543f7730e3e |
| .tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
| .rsrc |
686592 |
854cfc6b8cfaa350a80c09917d0abe66 |
| .reloc |
23040 |
1b22cdf3bc8b8ceee32600d456fa372f |
