How to remove A0456485.exe

A0456485.exe

The module A0456485.exe has been detected as Adware.Downloader

A0456485.exe
Remove A0456485.exe

File Details

Product Name:

Citrio
Company Name:

CatalinaGroup Ltd.
MD5: 737994664f20fa0c7a724c69c14b7182
Size: 2 MB
First Published: 2017-05-25 09:04:31 (7 years ago)
Latest Published: 2019-06-16 09:43:17 (5 years ago)
Status: Adware.Downloader (on last analysis)
Analysis Date: 2019-06-16 09:43:17 (5 years ago)

Overview

Signed By: Catalina Group Limited
Status: Valid

Common Places:

%localappdata%\catalinagroup\citrio\application\50.0.2661.275
%profile%\ser\local settings\application data\catalinagroup\citrio\application\50.0.2661.275
%localappdata%\catalinagroup\citrio\application
%sysdrive%\system volume information\_restore{c52b72cc-fd71-4681-b415-f03a3112c2d4}
%sysdrive%\descargas\programas\citrioportable\app\citrio-bin
%sysdrive%\windows.old\users\mbargash.jouf\appdata\local\catalinagroup\citrio\application

File Names:

nacl64.exe
A0456485.exe

Geography:

20.0%
10.0%
10.0%
10.0%
5.0%
5.0%
5.0%
5.0%
5.0%
5.0%
5.0%
5.0%
5.0%
5.0%

OS Version:

Windows 7 57.1%
Windows 10 33.3%
Windows XP 9.5%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000140000000
Entry Address: 0x000a8d28

PE Sections:

Name Size of data MD5
.text 845312 313ea1ceba427f3363a18f86a9d693b5
.rdata 1235968 df30be49febfbe5c85c2f41399b070a1
.data 13824 16f80d2995261a45de3074a22160dfca
.pdata 48128 5dea85f45c4e708038b3ef41b47626d9
.tls 512 642db2236dd2f7ae00eeb0a6621ff5e3
.rsrc 2048 bc1a5af91c867280925685c4486fb341
.reloc 7680 89a716a0759720fe5292070fb769b440

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for A0456485.exe
copyright for information about A0456485.exe