How to remove OCS3707.tmp
- File Details
- Overview
- Analysis
OCS3707.tmp
The module OCS3707.tmp has been detected as Adware.OpenCandy
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
430a7ff1a180a39d9bf3cf0c7a9a3743 |
| Size: |
909 KB |
| First Published: |
2017-05-21 05:04:39 (6 years ago) |
| Latest Published: |
2020-06-24 08:21:42 (3 years ago) |
| Status: |
Adware.OpenCandy (on last analysis) |
|
| Analysis Date: |
2020-06-24 08:21:42 (3 years ago) |
Overview
| %temp%\neroinstallfiles\nero20150504075820885\issetupprerequisites\opencandy |
| %temp%\neroinstallfiles\nero20150504083826662\issetupprerequisites\opencandy |
| %temp%\neroinstallfiles\nero20150504102418194\issetupprerequisites\opencandy |
| %sysdrive%\windows.old\users\aodaod u\appdata\local\temp\neroinstallfiles\nero20150504075820885\issetupprerequisites\opencandy |
| %temp%\neroinstallfiles\nero20150505104646503\issetupprerequisites\opencandy |
| %temp%\neroinstallfiles\nero20150504091558760\issetupprerequisites\opencandy |
| %temp%\neroinstallfiles\nero20150504083826662\issetupprerequisites |
| %temp%\neroinstallfiles\nero20150504075820885\issetupprerequisites |
| %temp%\neroinstallfiles\nero20150504102418194\issetupprerequisites |
| %temp%\neroinstallfiles\nero20150504075820885\issetupprerequisites |
|
36.2% |
|
|
12.1% |
|
|
8.6% |
|
|
8.6% |
|
|
6.9% |
|
|
3.4% |
|
|
3.4% |
|
|
3.4% |
|
|
3.4% |
|
|
3.4% |
|
|
1.7% |
|
|
1.7% |
|
|
1.7% |
|
|
1.7% |
|
|
1.7% |
|
|
1.7% |
|
| Windows 7 |
65.6% |
|
| Windows 10 |
24.6% |
|
| Windows 8.1 |
8.2% |
|
| Windows 8 |
1.6% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x00074e04 |
| Name |
Size of data |
MD5 |
| .text |
621056 |
6a1281147c1f68fa97383c24e510ae96 |
| .rdata |
231424 |
6f7c4b9b5cc8e745edfad69533b2f86f |
| .data |
11264 |
02efdf07607d4dbc64e220987445390b |
| .rsrc |
18944 |
7022c84f55986b226a533461187f7111 |
| .reloc |
39936 |
fe5f4b83297ad89980d74e7c9616d2bc |
