How to remove nsgA9E.tmp
nsgA9E.tmp
The module nsgA9E.tmp has been detected as Adware.Somoto
File Details
| MD5: | 8f4ed9a53703c50dc5b62f04d49f504a |
| Size: | 203 KB |
| First Published: | 2017-08-07 17:07:52 (7 years ago) |
| Latest Published: | 2019-05-31 10:11:11 (5 years ago) |
| Status: | Adware.Somoto (on last analysis) | |
| Analysis Date: | 2019-05-31 10:11:11 (5 years ago) |
Overview
| Signed By: | Somoto Israel |
| Status: | Valid |
Common Places:
| %localappdata%\microsoft\windows\temporary internet files\content.ie5\4a62n8it |
| %sysdrive%\save old install\7 run\appdata\local\microsoft\windows\temporary internet files\content.ie5 |
| %temp% |
| %localappdata%\microsoft\windows\temporary internet files\content.ie5 |
| %sysdrive%\windows.old\users\compaq\appdata\local\microsoft\windows\temporary internet files\content.ie5 |
File Names:
| setup[1].exe |
| nsgA9E.tmp |
| nsvBD79.tmp |
| bi.exe |
Geography:
| 33.3% | ||
| 22.2% | ||
| 11.1% | ||
| 11.1% | ||
| 11.1% | ||
| 11.1% |
OS Version:
| Windows 7 | 100.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x000030fa |
PE Sections:
| Name | Size of data | MD5 |
| .text | 24064 | 856b32eb77dfd6fb67f21d6543272da5 |
| .rdata | 5120 | dc77f8a1e6985a4361c55642680ddb4f |
| .data | 1024 | 7922d4ce117d7d5b3ac2cffe4b0b5e4f |
| .ndata | 0 | 00000000000000000000000000000000 |
| .rsrc | 3072 | d38de8d20532ae43294abcc1b7564b4c |
More information:
Download GridinSoft
Anti-Malware - Removal tool for nsgA9E.tmp
