How to remove Offercast391_ATU3_.exe
- File Details
- Overview
- Analysis
Offercast391_ATU3_.exe
The module Offercast391_ATU3_.exe has been detected as PUP.Ask
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
f6c17ce71f0ed0a30eadb1ea6efe9633 |
| Size: |
1 MB |
| First Published: |
2017-05-27 21:04:11 (7 years ago) |
| Latest Published: |
2019-04-03 03:16:30 (5 years ago) |
| Status: |
PUP.Ask (on last analysis) |
|
| Analysis Date: |
2019-04-03 03:16:30 (5 years ago) |
Overview
| %temp%\is-h6ac5.tmp |
| %temp%\is-f7e2j.tmp |
| %temp%\is-hl4th.tmp |
| %temp%\is-fv4o9.tmp |
| %temp%\is-jotrc.tmp |
| %temp%\is-b4kqk.tmp |
| %temp% |
| %temp% |
|
33.3% |
|
|
20.0% |
|
|
13.3% |
|
|
6.7% |
|
|
6.7% |
|
|
6.7% |
|
|
6.7% |
|
|
6.7% |
|
| Windows 7 |
73.3% |
|
| Windows 8 |
20.0% |
|
| Windows 8.1 |
6.7% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0000a11e |
| Name |
Size of data |
MD5 |
| .text |
94208 |
6f946efed24ecdb1ab658a89c64e8853 |
| .rdata |
32768 |
f49b06f8f3b8089325009aa2cc6e0c0d |
| .data |
5120 |
9f21af1a2667771b84878d7850c9b3a9 |
| .rsrc |
915456 |
3c43d8953ebcce18e804d5f810e07cbc |
| .reloc |
5632 |
834b8011044f53836869fc1616dd1a05 |
