How to remove f_000889
f_000889
The module f_000889 has been detected as PUP.OfferCore

File Details
Product Name: | uTorrent Web® |
Company Name: | |
MD5: | f4f238302d3529b21c6a8bf9ed4f5276 |
Size: | 1 MB |
First Published: | 2023-03-18 23:32:07 (2 years ago) |
Latest Published: | 2025-02-22 23:01:35 (4 months ago) |
Status: | PUP.OfferCore (on last analysis) | |
Analysis Date: | 2025-02-22 23:01:35 (4 months ago) |
Overview
Signed By: | Rainberry Inc |
Status: | Valid |
Common Places:
%localappdata%\yandex\yandexbrowser\user data\default\cache |
%profile% |
%profile% |
%sysdrive%\$recycle.bin |
%sysdrive%\$recycle.bin |
%desktop% |
%sysdrive%\$recycle.bin |
%sysdrive%\$recycle.bin |
%profile%\onedrive |
%profile%\onedrive |
Geography:
24.3% | ||
10.8% | ||
8.1% | ||
5.4% | ||
5.4% | ||
5.4% | ||
5.4% | ||
5.4% | ||
5.4% | ||
5.4% | ||
2.7% | ||
2.7% | ||
2.7% | ||
2.7% | ||
2.7% | ||
2.7% | ||
2.7% |
OS Version:
Windows 10 | 94.6% | |
Windows 7 | 2.7% | |
Windows 8.1 | 2.7% |
Analysis
Subsystem: | Windows GUI |
PE Type: | pe |
OS Bitness: | 32 |
Image Base: | 0x00400000 |
Entry Address: | 0x000b5eec |
PE Sections:
Name | Size of data | MD5 |
.text | 735232 | ad6e46e3a3acdb533eb6a077f6d065af |
.itext | 6144 | d40fc822339d01f2abcc5493ac101c94 |
.data | 14336 | 4c195d5591f6d61265df08a3733de3a2 |
.bss | 0 | d41d8cd98f00b204e9800998ecf8427e |
.idata | 4096 | a73d686f1e8b9bb06ec767721135e397 |
.didata | 512 | 41b8ce23dd243d14beebc71771885c89 |
.edata | 512 | 37c1a5c63717831863e018c0f51dabb7 |
.tls | 0 | d41d8cd98f00b204e9800998ecf8427e |
.rdata | 512 | 8f2f090acd9622c88a6a852e72f94e96 |
.rsrc | 56320 | 30366ad4e7de9b649aca21e79cc3fde3 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for f_000889
