How to remove C64D.tmp.exe
- File Details
- Overview
- Analysis
C64D.tmp.exe
The module C64D.tmp.exe has been detected as Trojan.Kryptik
File Details
| MD5: |
441398bf1eb73c5eebef63991eb015db |
| Size: |
716 KB |
| First Published: |
2020-06-29 13:20:13 (3 years ago) |
| Latest Published: |
2020-12-30 20:52:57 (3 years ago) |
| Status: |
Trojan.Kryptik (on last analysis) |
|
| Analysis Date: |
2020-12-30 20:52:57 (3 years ago) |
| %localappdata% |
| %temp% |
| %localappdata% |
| %localappdata% |
| %localappdata% |
| %localappdata% |
| %temp% |
| %localappdata% |
| %localappdata% |
| %localappdata% |
|
14.6% |
|
|
14.1% |
|
|
6.8% |
|
|
6.8% |
|
|
6.3% |
|
|
4.2% |
|
|
3.6% |
|
|
2.6% |
|
|
2.6% |
|
|
2.6% |
|
|
2.6% |
|
|
2.1% |
|
|
2.1% |
|
|
2.1% |
|
|
1.6% |
|
|
1.6% |
|
|
1.6% |
|
|
1.6% |
|
|
1.6% |
|
|
1.6% |
|
|
1.6% |
|
|
1.6% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
| Windows 10 |
73.3% |
|
| Windows 7 |
20.4% |
|
| Windows 8.1 |
4.4% |
|
| Windows 8 |
1.9% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0000253d |
| Name |
Size of data |
MD5 |
| .text |
655360 |
b3468dc095420a7c2104f31f0b5f1bf1 |
| .rdata |
21504 |
63f918b65bb4dcef53da578336f15af0 |
| .data |
7168 |
3ff20680c9ff7a3f77d93acc3ab4da78 |
| .rsrc |
48640 |
d9609af417b2182e4f0480f1fe8c86a1 |
