How to remove A0098020.exe
- File Details
- Overview
- Analysis
A0098020.exe
The module A0098020.exe has been detected as PUP.FakeAV
File Details
Product Name: |
|
MD5: |
b1f15d67969287cb17b168ab5d1c8cfd |
Size: |
431 KB |
First Published: |
2017-10-02 19:07:48 (7 years ago) |
Latest Published: |
2018-07-13 15:23:43 (6 years ago) |
Status: |
PUP.FakeAV (on last analysis) |
|
Analysis Date: |
2018-07-13 15:23:43 (6 years ago) |
Overview
%programfiles%\totalav |
%sysdrive%\system volume information\_restore{b27e5c6a-35d1-4c73-bc02-db61c65223dc}\rp517 |
%programfiles% |
SecurityService.exe |
A0098020.exe |
SecurityService.exe.6472.old |
|
50.0% |
|
|
9.1% |
|
|
9.1% |
|
|
4.5% |
|
|
4.5% |
|
|
4.5% |
|
|
4.5% |
|
|
4.5% |
|
|
4.5% |
|
|
4.5% |
|
Windows 10 |
63.6% |
|
Windows XP |
13.6% |
|
Windows 7 |
13.6% |
|
Windows 8.1 |
9.1% |
|
Analysis
Subsystem: |
Windows CUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00005f3e |
MVID: |
012c8464-9215-4c46-88eb-d4cf6df9310c |
Typelib ID: |
1e0c45f7-4cb7-4258-afe9-a9c03fb540ed |
Name |
Size of data |
MD5 |
.text |
16384 |
baae7d02660a8b32130cd7b4f860ab4b |
.rsrc |
401408 |
0f8cb75335a7b64826f8eb328874b3f4 |
.reloc |
512 |
c30faad10723da5caecaa6e1dd5ab505 |