How to remove trzE216.tmp
- File Details
- Overview
- Analysis
trzE216.tmp
The module trzE216.tmp has been detected as PUP.Gen
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
746f81acfe661cf78658ccfb5fe7ebb4 |
| Size: |
542 KB |
| First Published: |
2017-05-21 09:01:39 (7 years ago) |
| Latest Published: |
2020-12-14 04:08:29 (4 years ago) |
| Status: |
PUP.Gen (on last analysis) |
|
| Analysis Date: |
2020-12-14 04:08:29 (4 years ago) |
Overview
| %programfiles%\microleaves\online special application\version 2.6.0 |
| %sysdrive%\appdata\roaming\microleaves\online special application 2.6.0\install\977e0fe\version 2.6.0 |
| %programfiles%\microleaves\online special application |
| %sysdrive%\$recycle.bin\s-1-5-21-3528189060-3599398841-4009933278-1000\$ront22z\microleaves\online special application 2.6.0\install\977e0fe |
| %sysdrive%\appdata\roaming\microleaves\online special application 2.6.0\install\977e0fe |
| %programfiles%\microleaves\online special application |
| %programfiles%\microleaves\online special application |
| %programfiles%\microleaves\online special application |
| %programfiles%\microleaves\online special application |
| %programfiles%\microleaves\online special application |
| Online-Guardian.exe |
| trzE216.tmp |
| trzF22B.tmp |
| Online-Guardian.Vexe |
| trz8039.tmp |
| Online-Guardian.exe.quarantined |
| trz24D2.tmp |
| Online-Guardian.exe.vir |
|
19.2% |
|
|
9.1% |
|
|
8.3% |
|
|
5.1% |
|
|
4.2% |
|
|
4.2% |
|
|
4.0% |
|
|
3.6% |
|
|
3.0% |
|
|
3.0% |
|
|
2.6% |
|
|
2.4% |
|
|
2.4% |
|
|
2.4% |
|
|
2.0% |
|
|
1.8% |
|
|
1.8% |
|
|
1.8% |
|
|
1.6% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.0% |
|
|
0.6% |
|
|
0.6% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
| Windows 10 |
59.3% |
|
| Windows 7 |
31.2% |
|
| Windows 8.1 |
6.5% |
|
| Windows 8 |
3.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000012c0 |
| Name |
Size of data |
MD5 |
| .text |
105984 |
4ef5b97d80b55949ad7b2d1c1ff92d33 |
| .data |
512 |
0ef7780dc4a821f7c8d2d14b9b4830ab |
| .rdata |
6656 |
063be716a067e3e7caba823fac26e491 |
| .eh_fram |
11776 |
2841058ce3e9c96c1fa40f459da3cf26 |
| .bss |
0 |
00000000000000000000000000000000 |
| .idata |
3584 |
9d729caa1b9684dec72eb6b8e47a23f0 |
| .CRT |
512 |
63611519e03f45643a119ea42b8de125 |
| .tls |
512 |
210f409e50035e70c2412ea102d8a2e5 |
| .rsrc |
371712 |
757d4ad137363ef2a9b2a6f5997d252f |
