How to remove bsdCycbKdl.exe
- File Details
- Overview
- Analysis
bsdCycbKdl.exe
The module bsdCycbKdl.exe has been detected as Trojan.Presenoker
File Details
| MD5: |
1ea8d8290fb775c95d3094fa9f8e7c10 |
| Size: |
2 MB |
| First Published: |
2019-12-16 03:07:13 (5 years ago) |
| Latest Published: |
2023-02-06 23:29:34 (2 years ago) |
| Status: |
Trojan.Presenoker (on last analysis) |
|
| Analysis Date: |
2023-02-06 23:29:34 (2 years ago) |
| %localappdata% |
| %localappdata% |
| %localappdata%\microsoft\windows\inetcache\ie |
| %localappdata%\microsoft\windows\inetcache\ie |
| %localappdata% |
| %localappdata% |
| %localappdata% |
| %localappdata% |
| %localappdata% |
| %localappdata% |
|
51.4% |
|
|
13.5% |
|
|
13.5% |
|
|
8.1% |
|
|
8.1% |
|
|
5.4% |
|
| Windows 10 |
81.1% |
|
| Windows 8.1 |
16.2% |
|
| Windows 7 |
2.7% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00002098 |
| Name |
Size of data |
MD5 |
| .text |
2497536 |
2d2a1a50b7fdaa54a4d0b7609f5946af |
| .data |
51712 |
c7bc4256dd287ff4ff2a16960301166f |
| .tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
| .rdata |
512 |
83fd3850ca418119a0c85bd0c961b01b |
| .idata |
13824 |
78dc9c4b789b63bb83fde3e68e07506e |
| .didata |
2560 |
5d0faeebf2f2d7ed281d6532b34bb3c4 |
| .edata |
512 |
ab17fae4154fb025bbcd6bd29e80e667 |
| .rsrc |
281600 |
61927941f751e223365c9897914b0121 |
| .reloc |
210944 |
1e8ebb562bb86b9266da0d19e83f92a0 |
