How to remove UpdateSystemX86.dll
- File Details
- Overview
- Analysis
UpdateSystemX86.dll
The module UpdateSystemX86.dll has been detected as Trojan.Kryptik
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
b8c29d2c589df3f0371abf311e0fd125 |
| Size: |
203 KB |
| First Published: |
2017-05-21 18:08:12 (7 years ago) |
| Latest Published: |
2020-10-13 16:21:04 (4 years ago) |
| Status: |
Trojan.Kryptik (on last analysis) |
|
| Analysis Date: |
2020-10-13 16:21:04 (4 years ago) |
| %localappdata%\thorn |
| %profile%\ome\local settings\application data\thorn |
| %localappdata% |
| %profile%\аша\local settings\application data |
| %localappdata% |
| %windir%\temp |
|
55.8% |
|
|
19.6% |
|
|
6.3% |
|
|
4.0% |
|
|
2.2% |
|
|
1.8% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
| Windows 7 |
50.0% |
|
| Windows 10 |
35.3% |
|
| Windows 8.1 |
9.8% |
|
| Windows Vista |
2.7% |
|
| Windows 8 |
1.3% |
|
| Windows XP |
0.9% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x00018a83 |
| Name |
Size of data |
MD5 |
| .text |
112128 |
b4c791481881e6549ba8813a1a2eb477 |
| .rdata |
76800 |
1dad343f34f310578b1832e9b5667c4a |
| .data |
3584 |
0b8b96d9d2306cf7aa6720dd7a3915a2 |
| .rsrc |
1536 |
5489b36150a33ea432ea9225a34e7edf |
| .reloc |
12800 |
a8bef73168b977c525a22ad12724da3c |
