How to remove nsp9093.tmp.exe
- File Details
- Overview
- Analysis
nsp9093.tmp.exe
The module nsp9093.tmp.exe has been detected as PUP.Gen
File Details
MD5: |
1818fd612ef9c79957ed601436e90c9e |
Size: |
735 KB |
First Published: |
2017-05-21 04:03:12 (7 years ago) |
Latest Published: |
2020-12-18 19:16:00 (4 years ago) |
Status: |
PUP.Gen (on last analysis) |
|
Analysis Date: |
2020-12-18 19:16:00 (4 years ago) |
Overview
%programfiles%\globalweather\2.0.0.0 |
%localappdata%\temp |
%sysdrive%\adwcleaner\quarantine\files\kaflligoiwrzrqsespizkrnymvvwkaep\2.0.0.0 |
%sysdrive%\docume~1\toey\locals~1\temp |
%sysdrive%\adwcleaner\quarantine\files\gzirwazcrtugvnirermfyucujnwkjmkw\2.0.0.0 |
%sysdrive%\windows.old\users\aodaod u\appdata\local\temp |
%sysdrive%\adwcleaner\quarantine\files\vacuctnyrebftwfhjfxchvcmgzuvpovu\2.0.0.0 |
%sysdrive%\adwcleaner\quarantine\files\lneojoxkenmtotrqtmefxksplijnlllo\2.0.0.0 |
%sysdrive%\$recycle.bin\s-1-5-21-1742059381-2257059865-4143528173-1001\$r26rmf5\quarantine\files\dkllylekyauzjtxpplavueidbfjruzif\2.0.0.0 |
%sysdrive%\windows.old\users\rahmawan\appdata\local\temp |
weatherHelper.exe |
nsp9093.tmp.exe |
weatherHelper.exe#A0A6048FF959B6E8 |
|
60.3% |
|
|
19.5% |
|
|
4.9% |
|
|
3.4% |
|
|
3.0% |
|
|
2.2% |
|
|
1.9% |
|
|
1.5% |
|
|
1.1% |
|
|
1.1% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
Windows 7 |
52.2% |
|
Windows 10 |
33.3% |
|
Windows 8.1 |
11.1% |
|
Windows XP |
1.5% |
|
Windows Vista |
1.1% |
|
Windows 8 |
0.7% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00067f9a |
Name |
Size of data |
MD5 |
.text |
621056 |
6dea9c3c0f8a7532cb2b9335a2bffdf6 |
.rdata |
76288 |
86dc5ea916e3f5d304ddf5c007e2b8bf |
.data |
11264 |
fc014dff1187f34898caf297e0033239 |
.tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
.rsrc |
2560 |
ed14660b515d08c513bf916b006783b3 |
.reloc |
34304 |
87542ba80200cb4f44db95490cfbeb66 |