How to remove QsKowZEmwU.exe

» File
File Details
Overview
Analysis

QsKowZEmwU.exe

The module QsKowZEmwU.exe has been detected as Adware.PullUpdate

QsKowZEmwU.exe

Remove QsKowZEmwU.exe

File Details

Main Info:

Product Name:	News Alert
Company Name:	Mathematical Applications
MD5:	d04cb325c047d4f54609dc0d97bbcbaa
Size:	47 KB
First Published:	2018-01-06 21:09:49 (6 years ago)
Latest Published:	2018-01-06 21:09:49 (6 years ago)

Analysis:

Status:	Adware.PullUpdate (on last analysis)
Analysis Date:	2018-01-06 21:09:49 (6 years ago)

Overview

Digital Signature

Signed By:	Mathematical Applications
Status:	Invalid (digital signature could be stolen or file could be patched)

Common Places:

%commonappdata%\ptcqfr

Geography:

100.0%

OS Version:

Windows 10

100.0%

Analysis

PE Info:

Subsystem:	Windows GUI
PE Type:	pe
OS Bitness:	32
Image Base:	0x00400000
Entry Address:	0x0000b84e

PE Sections:

Name	Size of data	MD5
.text	39424	bcba35f32340ae4066cb25d147ab3f5d
.rsrc	1536	1eb0fe55669d283100fc0a6e2ae0c946
.reloc	512	621515a5391782f711fd8cfdedda0ae5

More information:

Search on Virustotal

Download GridinSoft Anti-Malware - Removal tool for QsKowZEmwU.exe

copyright for information about QsKowZEmwU.exe