How to remove mystartTb_klcp[1].exe
- File Details
- Overview
- Analysis
mystartTb_klcp[1].exe
The module mystartTb_klcp[1].exe has been detected as PUP.Visicom
File Details
Product Name: |
|
Company Name: |
|
MD5: |
f081b6c9cffd59b93796c91d5ee01f0f |
Size: |
4 MB |
First Published: |
2017-05-21 05:04:37 (7 years ago) |
Latest Published: |
2020-06-17 23:05:59 (4 years ago) |
Status: |
PUP.Visicom (on last analysis) |
|
Analysis Date: |
2020-06-17 23:05:59 (4 years ago) |
Overview
%localappdata%\microsoft\windows\temporary internet files\content.ie5\f2trsqo0 |
%localappdata%\microsoft\windows\temporary internet files\content.ie5\qtybjsc5 |
%localappdata%\microsoft\windows\inetcache\ie\6te207rk |
%localappdata%\microsoft\windows\temporary internet files\content.ie5 |
%localappdata%\microsoft\windows\temporary internet files\content.ie5 |
Windows 7 |
83.3% |
|
Windows 8.1 |
16.7% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x0000323c |
Name |
Size of data |
MD5 |
.text |
23552 |
0bc2ffd32265a08d72b795b18265828d |
.rdata |
4608 |
f179218a059068529bdb4637ef5fa28e |
.data |
1024 |
975304d6dd6c4a4f076b15511e2bbbc0 |
.ndata |
0 |
00000000000000000000000000000000 |
.rsrc |
18944 |
f3b1d46d53ca6a842819940e31c5dffb |