How to remove KysqWurKSPhC.exe
- File Details
- Overview
- Analysis
KysqWurKSPhC.exe
The module KysqWurKSPhC.exe has been detected as Trojan.LoadMoney
File Details
Product Name: |
|
MD5: |
07a0f9558a696a5964b74ebeb2d0c491 |
Size: |
2 MB |
First Published: |
2017-05-24 12:03:13 (7 years ago) |
Latest Published: |
2018-10-26 08:12:09 (5 years ago) |
Status: |
Trojan.LoadMoney (on last analysis) |
|
Analysis Date: |
2018-10-26 08:12:09 (5 years ago) |
Overview
%windir%\microsoft |
%localappdata%\temp |
%windir% |
svchost.exe |
KysqWurKSPhC.exe |
enRmuc1EJ7IK.exe |
svchost.exe.quarantined |
kfGHkf2GoU37.exe |
uIsAKr9U3mlM.exe |
C4BkPKsMjv4N.exe |
bvjrKhsqqAE1.exe |
PJnTxN9ZZ14r.exe |
2Xk1MutUyzue.exe |
YY8iom00AF5n.exe |
djwmitpnos.tmp |
svchost.exe.update.exe |
|
28.4% |
|
|
25.3% |
|
|
12.6% |
|
|
8.4% |
|
|
3.2% |
|
|
3.2% |
|
|
3.2% |
|
|
2.1% |
|
|
2.1% |
|
|
2.1% |
|
|
2.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
Windows 10 |
48.4% |
|
Windows 7 |
42.1% |
|
Windows 8.1 |
5.3% |
|
Windows XP |
3.2% |
|
Windows 8 |
1.1% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x000336d5 |
Name |
Size of data |
MD5 |
.text |
294400 |
e3bf26fe263862c33c0dd2bbcafc6da5 |
.rdata |
69120 |
c7f6fac0dbfdaa17f43255831684f781 |
.data |
2157568 |
a2b7ab2e6fc54e3445e46a6f5f22070f |
.rsrc |
1536 |
1181e3b4ca9cbbf8e320fadd9cf3081a |
.reloc |
28160 |
4b6e79f4bb3f1517df3db0b1f612a73b |