How to remove ytauninstall.exe
- File Details
- Overview
- Analysis
ytauninstall.exe
The module ytauninstall.exe has been detected as Adware.Crossrider
File Details
MD5: |
ddcd1e95191f7391605207bb296f8413 |
Size: |
486 KB |
First Published: |
2018-02-09 06:03:36 (7 years ago) |
Latest Published: |
2022-02-20 23:06:24 (3 years ago) |
Status: |
Adware.Crossrider (on last analysis) |
|
Analysis Date: |
2022-02-20 23:06:24 (3 years ago) |
Overview
%sysdrive%\windows.old\users\cliente\appdata\local\temp |
%sysdrive%\windows.old\users\cliente\appdata\local\temp\sainst |
%temp%\sainst |
%temp% |
%programfiles% |
%programfiles% |
|
28.6% |
|
|
28.6% |
|
|
14.3% |
|
|
14.3% |
|
|
14.3% |
|
Windows 7 |
71.4% |
|
Windows 8.1 |
14.3% |
|
Windows XP |
14.3% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x0001c611 |
Name |
Size of data |
MD5 |
.text |
173056 |
ad443b2c4cbf7d14ad164bf2fea29fc8 |
.rdata |
48128 |
b120a326d63c400776d787554f81bf66 |
.data |
13312 |
20f77ea21998ddcd81dcb3aa87368d9a |
.rsrc |
237056 |
ff1a19df6827031c10c371a85243dc3c |
.reloc |
18944 |
4ad3d7cf125c831147780da0de9654c7 |