How to remove askinstall50.exe
- File Details
- Overview
- Analysis
askinstall50.exe
The module askinstall50.exe has been detected as Spy.Keylogger
File Details
| MD5: |
1fc45771607f2e79f967f405f6048d33 |
| Size: |
1 MB |
| First Published: |
2021-07-15 20:08:38 (4 years ago) |
| Latest Published: |
2021-08-08 20:43:27 (4 years ago) |
| Status: |
Spy.Keylogger (on last analysis) |
|
| Analysis Date: |
2021-08-08 20:43:27 (4 years ago) |
| %temp% |
| %temp% |
| %temp% |
| %temp% |
| %temp% |
| %temp% |
| %temp% |
| %sysdrive%\windows.old\users\ahmdy\appdata\local |
| %temp% |
| %temp% |
|
20.0% |
|
|
20.0% |
|
|
10.0% |
|
|
10.0% |
|
|
10.0% |
|
|
10.0% |
|
|
10.0% |
|
|
10.0% |
|
| Windows 10 |
90.9% |
|
| Windows 7 |
9.1% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000d728c |
| Name |
Size of data |
MD5 |
| .text |
1060352 |
4d844f0e1949047429fd796623212e64 |
| .fhgrhza |
4096 |
cfc1b74d189a453ae84a1ca819f97482 |
| .fhgrhza |
9216 |
49c2450f4468a2d7d9cdd51f580b87cd |
| .fhgrhza |
1024 |
e0104cb7d723f93abd1168f14e33bae5 |
| .fhgrhza |
1024 |
3bcf718301fe97df3bc6e488276a2a4e |
| .fhgrhza |
4608 |
767cad5050c54e8d8a8c82e58a875250 |
| .fhgrhza |
3584 |
035801dee7db77b37099cd844629ba07 |
| .fhgrhza |
3072 |
a0d4c1de0093b805b79630aabd32a8b3 |
| .rdata |
190464 |
d9e00822b89ca82de92559c32389232f |
| .data |
11264 |
85efe8c89226adee4dbd2977d1fb5ef8 |
| .fhgrhza |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
| .rsrc |
127488 |
6a8db8eb8657586f818d42e8c7b49f0e |
| .reloc |
34304 |
07d7be4de70c93f26152097a3a24a212 |
