How to remove trz1AB4.tmp
- File Details
- Overview
- Analysis
trz1AB4.tmp
The module trz1AB4.tmp has been detected as PUP.SystemOptimizer
File Details
| Product Name: |
|
| MD5: |
fe577666dc51d42e532d05144564724b |
| Size: |
2 MB |
| First Published: |
2017-05-31 14:10:28 (7 years ago) |
| Latest Published: |
2018-11-11 20:06:50 (6 years ago) |
| Status: |
PUP.SystemOptimizer (on last analysis) |
|
| Analysis Date: |
2018-11-11 20:06:50 (6 years ago) |
Overview
| %appdata%\sysmon |
| %appdata%\sysmon.$quar |
| %sysdrive%\adwcleaner\quarantine\xrpmcarcr4 |
| %sysdrive%\adwcleaner\quarantine\rywtiizs2t |
| %profile%\oki\application data\sysmon |
| %sysdrive%\system volume information\_restore{4969b5b1-1f7c-46fe-a5ea-3a1e8d3428cb}\rp815 |
| %sysdrive%\adwcleaner\quarantine |
| %appdata% |
| sysmon.exe |
| trz1AB4.tmp |
| trz5F01.tmp |
| trz9288.tmp |
| is-4JE5R.tmp |
| A0545630.exe |
| sysmon.exe.quarantined |
| sysmon.exe.vir |
| cccccc.exe |
|
23.4% |
|
|
15.4% |
|
|
6.9% |
|
|
6.9% |
|
|
5.7% |
|
|
4.6% |
|
|
4.6% |
|
|
2.9% |
|
|
2.9% |
|
|
2.3% |
|
|
2.3% |
|
|
2.3% |
|
|
1.7% |
|
|
1.7% |
|
|
1.7% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
| Windows 7 |
46.9% |
|
| Windows 10 |
45.1% |
|
| Windows 8.1 |
5.7% |
|
| Windows XP |
1.7% |
|
| Windows 8 |
0.6% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00111b8e |
| Name |
Size of data |
MD5 |
| .text |
1732096 |
a8ab558babe99d91a38ee9276f8c3e6e |
| .rdata |
313856 |
c2a1d335f89374c6401cd4d27f22a3ec |
| .data |
25088 |
1a903129b906edb99a990988d9392fc4 |
| .rsrc |
798720 |
3b6ff57bced475085b48b1ddfef777b1 |
| .reloc |
178176 |
cddf6f164f48b5ef037ddf25ed02ab99 |
