How to remove Offercast391_ARS_.exe
- File Details
- Overview
- Analysis
Offercast391_ARS_.exe
The module Offercast391_ARS_.exe has been detected as PUP.Ask
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
fbc33f5f28d59673491ba1389383a06d |
| Size: |
997 KB |
| First Published: |
2017-05-22 10:25:59 (7 years ago) |
| Latest Published: |
2019-03-11 07:15:34 (5 years ago) |
| Status: |
PUP.Ask (on last analysis) |
|
| Analysis Date: |
2019-03-11 07:15:34 (5 years ago) |
Overview
| %sysdrive%\docume~1\deep\locals~1\temp\is-85up1.tmp |
| %sysdrive%\docume~1\deep\locals~1\temp\is-dqrod.tmp |
| %temp%\is-gpq4b.tmp |
| %sysdrive%\vtroot\harddiskvolume1\users\fausto\appdata\local\temp\is-7cpir.tmp |
| %temp%\is-okb0j.tmp |
| %temp%\is-s8cef.tmp |
| %temp%\is-pgsfb.tmp |
| %temp% |
| %temp% |
| %temp% |
|
22.2% |
|
|
16.7% |
|
|
11.1% |
|
|
11.1% |
|
|
11.1% |
|
|
11.1% |
|
|
5.6% |
|
|
5.6% |
|
|
5.6% |
|
| Windows 7 |
72.2% |
|
| Windows XP |
11.1% |
|
| Windows 8.1 |
11.1% |
|
| Windows 10 |
5.6% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0000a11e |
| Name |
Size of data |
MD5 |
| .text |
94208 |
6f946efed24ecdb1ab658a89c64e8853 |
| .rdata |
32768 |
ec6ae557ff7b155a68c30dd2e067e08c |
| .data |
5120 |
9f21af1a2667771b84878d7850c9b3a9 |
| .rsrc |
876032 |
91fb341e55febca53f30baf60431bbe0 |
| .reloc |
5632 |
834b8011044f53836869fc1616dd1a05 |
