How to remove temp.exe
temp.exe
The module temp.exe has been detected as Adware.Crossrider
File Details
| Product Name: | I - Cinema |
| Company Name: | iCinema |
| MD5: | fc92f06efff1be8f7faef60cbff3c611 |
| Size: | 10 MB |
| First Published: | 2018-04-21 22:06:22 (6 years ago) |
| Latest Published: | 2019-04-21 02:24:19 (5 years ago) |
| Status: | Adware.Crossrider (on last analysis) | |
| Analysis Date: | 2019-04-21 02:24:19 (5 years ago) |
Common Places:
| %temp% |
| %sysdrive%\incoming\nouveau dossier (2)\users\jimmy\appdata\local\temp |
| %sysdrive%\windows.old\users\mariana\appdata\local\temp |
Geography:
| 66.7% | ||
| 33.3% |
OS Version:
| Windows 7 | 66.7% | |
| Windows 10 | 33.3% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x0000412d |
PE Sections:
| Name | Size of data | MD5 |
| .text | 34304 | ffc08f10ee3a1b9d790572b3a46488b5 |
| .data | 512 | 28f29d4150b83e7faae233a71c5cab15 |
| .rdata | 9728 | f652035f54b3a74c89f7bb1cb907d4d2 |
| .bss | 0 | 00000000000000000000000000000000 |
| .idata | 5120 | 0d5c3df1017a50cd5a6baab82c884d87 |
| .ndata | 8192 | 0829f71740aab1ab98b33eae21dee122 |
| .rsrc | 74240 | c62b901e56d7aaf274824aad7adfa856 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for temp.exe
