PUP.MSIL.CaptureScreen.A
The detection of PUP.MSIL.CaptureScreen.A on your system indicates the presence of a potentially unwanted program (PUP) that may be causing issues with your computer's performance and security. It is essential to understand the nature of this threat and take appropriate steps to remove it to prevent any potential harm.
Table of Contents
What Is PUP.MSIL.CaptureScreen.A?
PUP.MSIL.CaptureScreen.A is a type of potentially unwanted program that may have been installed on your system without your knowledge or consent. The name suggests that it may be related to capturing screen activities, which could be a concern for your privacy. PUPs are often bundled with other software or downloaded from the internet, and they can cause a range of problems, from annoying pop-ups and ads to more serious issues like data theft and system crashes.
How PUP.MSIL.CaptureScreen.A Operates
Once installed, PUP.MSIL.CaptureScreen.A may operate in the background, potentially collecting and transmitting data about your system and browsing activities. It may also display unwanted ads, modify system settings, or install additional software without your permission. The exact behavior of this PUP can vary, but it is likely to cause problems with your system's performance and security.
Symptoms of Infection
If your system is infected with PUP.MSIL.CaptureScreen.A, you may notice a range of symptoms, including slow system performance, unwanted ads and pop-ups, and changes to your browser settings. You may also notice that your system is crashing or freezing more frequently, or that your browser is being redirected to unwanted websites. In some cases, you may not notice any symptoms at all, which is why it is essential to run regular virus scans and monitor your system's behavior.
How to Remove PUP.MSIL.CaptureScreen.A
- Boot your system in Safe Mode with Networking to prevent the PUP from loading and to allow you to download and install removal tools.
- Download and install a reputable anti-malware tool, such as SpyHunter, and run a full scan of your system to detect and remove the PUP.
- Uninstall any suspicious programs that may be related to the PUP, and be cautious when installing new software to avoid bundled PUPs.
- Reset your browsers, including Chrome, Firefox, and Edge, to their default settings to remove any unwanted extensions or add-ons.
- Reboot your system and run another scan with your anti-malware tool to ensure that the PUP has been completely removed.
Conclusion
Removing PUP.MSIL.CaptureScreen.A from your system requires careful attention to detail and a thorough understanding of the removal process. By following the steps outlined above, you can help to ensure that your system is free from this potentially unwanted program and that your personal data and system security are protected. Remember to always be cautious when downloading and installing new software, and to run regular virus scans to detect and remove any potential threats.
Analysis Report
General information
| Family Name: | PUP.MSIL.CaptureScreen.A |
|---|---|
| Signature status: | No Signature |
Known Samples
Known Samples
This section lists other file samples believed to be associated with this family.|
MD5:
70141fc4b678b62a1ecaaa042264b569
SHA1:
46b382f56f925f7ef0ff291c7e9df21333b0c4f8
SHA256:
BA4BB4A12DFC1462E0603586EAB27EDE8B1DA46EC388288AE485AA8E7B5BD6D9
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
e5a05439324d2ddad38934d9b7e143e6
SHA1:
f5ce85bc884547ef20c376f24369287f555d0d46
SHA256:
44B6A8D4BFD899B29AAC46930EE4714837B52DFD5AC45A74202F520EAFF05B23
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
d45d24c33c07757e3f9a70df7d4f251a
SHA1:
3541924423ef53efa203b2d65ea7e1a2482d5cc6
SHA256:
C94872C2523053670D01D9E07F66F398CD32D33BB6DCC7F4BA1F218690CBCE33
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
7261f65b9957ee0f571fce345c859503
SHA1:
5941dab5425eb812b6ac822e954a978b45effe80
SHA256:
4A2FEAFD523FED32EF3BCBD711DD6432FB0FCF1AC232F17468A0606F9F8BBFE8
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
d4efc6c899f91e1bd8ffd719378418d1
SHA1:
d6e053637de895f649a58d69b6c9d9a24736ddbf
SHA256:
78EC96C4218ECD046B7CB4B3014CFFB577D6D053CC3AD2DF1EAB46DC1BC0709D
File Size:
12.80 KB, 12800 bytes
|
Show More
|
MD5:
eaf5bd55b2ee1389013c2ad20e3f2f1a
SHA1:
bb773f02add3f77151e54ae3d5b2ff2ecfee2d65
SHA256:
1085E04AD2E98333D0379EBD232BCFF56256E9DBDA95D5E1B68B98D26D4EF054
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
d187a8c6ec965f6f68356422e645b5a2
SHA1:
ac99f175ffad9027a284347be5880d2025f506a7
SHA256:
B4044FCED107512C9A9DCA69A1F2D702D22F6C92F17BAEC674E4A66495B60BDD
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
ea538ce4b1b3acdb086a340f027fefed
SHA1:
d02549c4d389658d4dd518fcad93a8006c0b31da
SHA256:
BF2F4CE9A76186B8468CD10D8DB7CF606EC7515799B9E6032A93E883949B8BF7
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
817dfc089000e6d2fbab7c9d1db0b18c
SHA1:
917d3f843550a4164e8144b3d16c999fb911aae6
SHA256:
6D26F8286D1EF3B1359F2BA8469EE0C8A97CFE5E5330BFA1EA47C044C0D0EE4F
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
62064874a93d78e0c5ac5c72b893ed1a
SHA1:
85173e4dd138d618ece59d3e4da2ec95fb4d17a5
SHA256:
F494121B9F10A54851A4440ADECE1DB1A6462F3704CC5E0C239E48B980F4C9BA
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
4be58a4efcd0a62debfad44f40adb0ab
SHA1:
6450261ef1d1c6ed9c3b15ef8cb23459e026abaf
SHA256:
EF6DC5B9B45E091FB7EF7D1DC4C8884460B2536A28555A59C8B3C1552A2BCD65
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
e4ff88c98929aab5934220d994c083c8
SHA1:
da06b91a371c8f470c4c59212554943956cd35df
SHA256:
0039BD42E42BE1E0FC70FFF34EF8FA110A33E8BFF396F292CD037618CC64CD2A
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
12b261776b9bcef785e26f8bbf84bb37
SHA1:
3e8cebad5f484a036723940df0bbf20b88b55ceb
SHA256:
2383FFEC92F2B095C3E8A5C215BF16AFDBBD06FAEC06FD2D657323A227DF764B
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
54a41d74c28ebd52c349bd3791461842
SHA1:
e6f0bcbd05daf4137a98c50e70b2b8c54c63900a
SHA256:
C438B8040C5FD59CDA9BD8A7703C6F25D35631B5B0E5591CEBB687A54206AC07
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
6f4988f15e5830686ed63e392a6848bb
SHA1:
12be63a165bcdb34d87523e415beb92a68ddc186
SHA256:
FB81940706CA891FB0BF65E6F8E71D0944205AA1BE53CF911ABC603761AD9722
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
850304e02f9978d31bd41d6bc77dba8d
SHA1:
a62d307590d9f484244d638e7c64df9fb6616319
SHA256:
1B374542D28484E4E29A6F8574C45F9FCADDA0A1CD9CC13E65883B032598FA4D
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
39c4445ad9cdf98f53a05ffcbcafbf25
SHA1:
5afe6d1b724b30908033ce8481fd4a097ae176f3
SHA256:
9687C110A1B65ECED70202874BC26A7A79FD25058916813A6B75728CE0CB57B2
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
1723b83523ef9cb27da30f6f92e93738
SHA1:
4bbe196141dffda2e5b2f3e6996e6ebfa8498ea9
SHA256:
D04E5DBBB15FC92B9CB49CD60C6336A8982CED5247AA3F0DCAF9157C77F0C57E
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
1e7c0ff9443cb45b65848711382f7832
SHA1:
c7571379c1f7bf2e33572e82e6f92c513e5e9e16
SHA256:
4AF90F8E4FB13D95FA9C6AA43FA0EEE9BCFC258E0CC289DDD04D99403BF1F2C1
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
25951214efb5123ff7725465e216a834
SHA1:
60639f626ebad82b20c6e99af8d7e74bedb0578b
SHA256:
0168C8C409C6AD62A4B3D68E96F1A18511B99F44A0DB7E61692A545E01B35B36
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
a5b61944d4c17579719271b2dd3bb4e9
SHA1:
aba410bc6e0aa625410d8ec21a9c5c34e4fc7842
SHA256:
C27130026CF4E12CE0C486C82507A33F28137C4E82FB6F662E23429914C7A586
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
3275fbc6820414e819a4b1dcbc0a4058
SHA1:
627b393d5a89b319b4cb9663f82f7c0c6520a100
SHA256:
2F1C41D044A7B96D5F6D2A783F25876D089FDDC507881255BAA8263A12905B00
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
345732d27e28aa7bf720e42ad4065abe
SHA1:
c5de5e728ab662d5ff4e4152d5a86c61f3f4b717
SHA256:
E64C5DE3774FBDD171800D79E8084D16923023BA660964565DF95A9A45AF9068
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
b1cb7a8f16e8bcb5c55c4e54f003f807
SHA1:
912d367a9158a387f79b5f5082ce5825e08de151
SHA256:
443C960A706332C98622C88BF24F61E438089AB42645A45F6B60572393FC732B
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
717c74b0d3857909510ab8915832edbe
SHA1:
b1c19e0a27b109f5fc5733cc76b46ce423235139
SHA256:
868F33300371671FC1F73CAB8AB71A78ACA75195B06AA7E25D4261BFD34B718C
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
31a1cbb6388b4cc4d68bb31c9c3cb47a
SHA1:
50343721579aed9ee9d3810e957d494ea6dd25e4
SHA256:
958BD7FE2C088460317C1A8BA2099A38670B2372115956D50D60EA631914D67C
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
05004226bfa0a3f207e50ab4f6b2cece
SHA1:
92c8ec0d5f19e365b7ae722513826ef7c4736972
SHA256:
24C928F749D1CB30DD2A62F3C6FCC983D4D96889BF87B8FBA3ABC333E7588001
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
f80aac8634c45a028f97cfb20f436a57
SHA1:
c1f52e597b1c80111d8cab506488a4b356a8064f
SHA256:
D5075964A392F048BE16409D2F2EB1038DC9688AB2D43DCF933D080848959696
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
dd3c3828f9c86be2fc70d2c24495bb50
SHA1:
8a536381ee31629dac1c7322dcf24dedc09a8f2a
SHA256:
F636672DE23D7179A34869D27D470A8AFCB33A7DF332758D19367F0F3B165D40
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
511808a48b12e009ba61d4c9aa8f3132
SHA1:
56c7f4990d5a35976b034352a6db6ac1efd66383
SHA256:
824E0C9F90D43927973101D64E34FB8A9AA72375811DB86905470D9020750914
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
ae26ae9de0538c4dc07917d2ef0a0b0e
SHA1:
dcf86e7af74e584859af66c9bff8a1edccbf21ea
SHA256:
D58F12A09AABD642329B66FB7DF390E360B4BE4CA46611374BF130AD19EDBC30
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
ea69a2494c817954955a3aa498c83d02
SHA1:
dbab29ce3f8e554d1e91a54f93d2113423e9c15a
SHA256:
25379CE40033386CBAFD3E9652A29161AC723C3C8FD59249F845FA276609E2B0
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
8d5e3fe71b53a1f4093e1ad85f1e4e6a
SHA1:
d9cd971fe23dec20dc2bbe6356e79000c6011f4e
SHA256:
0741B4AAEE838139D661CB4050EF84C2DB09EA328F6651322B7667CED8260A0B
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
594cf730f276cd9a6f243bd8c9cf9a4f
SHA1:
4eead0b1e7f29e47f99bd85dae345f8afa6dcb03
SHA256:
B87F95D1134E374C6195C23AC49331DB5639BCC1DB0F3A8A74145B2089AD6930
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
a38428c78fccb40b498a7541d60a8b62
SHA1:
d0a8450b6590f8dae8774b32f9fee7f63a523b5b
SHA256:
848E786A0A986B648CF678D7EB2901ADE81373E27B517BBBCB1541DA9E824683
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
986f30c68c444c8e05dfe34367b3df5b
SHA1:
05c338e455530f05ec60d60fcb24d0ceff104083
SHA256:
7D32854D64EF448FD1339DADA8C6EA80D373559AD868EB8436BA9EE971730569
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
d7cc078c7eecfa71e63c33f324606680
SHA1:
040444d3f8af71d60de3d9f94c237233cfc1e0c1
SHA256:
51407E9D85EB84BFE124693AD6E4D47B58506C799918EE93DE65C8D9DEF0AE67
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
30aeca46beb0ff1f069773cd46591c81
SHA1:
b23bb7c85a06c94861202752809c1032b4612ec6
SHA256:
1CA2E9FA4D8B8D9899F76736784EE6AA36E38D6804F3E9A9E44D240A430959B6
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
14acbe536492919906b1f4613fe7d7c0
SHA1:
9444ab2ad90d854549ec6408ca6f630c4c9bc115
SHA256:
6B2CD2DB9D87CC203AE6AC9453AFB77729D7A9205298B31037B9BF99ED1D084D
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
ddac44074f32054a9e20dfafee0c6c9a
SHA1:
61b4609b0b108024e914bf3de5981ad86862f579
SHA256:
C4DFD809A5A365014D83487E7683CD103E865D476C12D9640A58289873952FFC
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
92803c1c5a16a9e8a22fdd7d01572c2c
SHA1:
d681e2d8a27ab201dc0d5cb6a85ee9da476ec4e5
SHA256:
DD513BCD9F45B822F98B3A2F0F4E5958235D76C2467B97BA9C01C22111D1035D
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
98056b123bc3756476f884ebaf4f7330
SHA1:
01e1c1e0d7930601378175cbb34f0326f2d2787b
SHA256:
36DBEDE525C5A10E08F461C260F8050F47B62689F207430B2A42207EE4C2B279
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
0ffdd6fb19eb6ccb9874d86fbd2eff8a
SHA1:
7a11a0e19df7d2804603a3990cbf3eabef6566a1
SHA256:
02F7A4A72B7E096949906BC00D7526E1A0B4F766B06A2852D27FA51193B21A00
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
f09f79e67ef630d10257778f6b701aa4
SHA1:
d47dea1b5446ec19f3939bb5f08aa263d5d621af
SHA256:
A123F146044EA044AD43B7F65A73242E32A2B0B7A1A8068BF7DD28B5D0B0A76F
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
263fd8f5f87474515c2c91fd07339abf
SHA1:
967a563c91f1519e70964bfcfb2eaead14dff679
SHA256:
7FC27E9C6D37CB9149D797BE2913A0620C0351950D9432F8E92055AC2C38305A
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
e3131d8bea20e59f59579c28cc4a3562
SHA1:
778098f684f77ff1d1e5eab0e3495683747b0e81
SHA256:
E5C67CA68D12E8903EF894850815E9ECA1DB7F3CD08B1B7218F88834B0FCA683
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
c07c31bbc88d03cab375d8aa6f15c328
SHA1:
f21bc5fefbd53e67869159d942dc824bcd29240e
SHA256:
4305D8A5025382DD94C0D77C95F1A219B8C10B2CF4ED0908F811829171FA6067
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
1a847456a4509e2164b4a317fd67f0b2
SHA1:
b7ccb35d65f5652a3088dbac9fca4ec8649871b8
SHA256:
0D1ACA0EA1DCA42102DA3571C04AEC3BC81C8388316D7248BFBEAFC0DB82159E
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
8a44bb2fc646a57cc1a8d497e8e79fe6
SHA1:
1af8030a96fb4f1762256a0cb0f87261b7593012
SHA256:
41200DBA6EAAC967A2F05FEE1BC7EE23471E5F95CF009C316894B3EC8F7B32DF
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
0dce9b1dd328a3f124a7c795c4a319a7
SHA1:
f1dd2360fbe9bf3ed71d43f7c6afd3c5d0350723
SHA256:
0986ED78CA4E2D0ECF26F46D092BC6555DF8386570FD3F7DD80EA0F2AC16A7D2
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
35d82cba7dc53d0ae71923e42149bc08
SHA1:
7716170c276155755addb910269749e0bbbc2cd5
SHA256:
AE28E651A499A27B59F81C311DA87170275522C28E8D89D1C306DE0A5983C406
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
23afe64ead4bde4ddb827c024833070b
SHA1:
f5fdac088031d350943a2e1e3c1c79aa55871d43
SHA256:
872D2DA49E6BAA2495CA850E2669EDF14B1125D5B9CBEDC0065FFF44DC0D7782
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
f89d9d12c09f8c53f50363c42d97fcd2
SHA1:
839cb8a94763a9b4019f81069eed0874087665b9
SHA256:
9CEBFA4FDCBE78E669FE41DC6C61478E1208EA225AA8D682FF714D3BD0D93F47
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
df55247b6fe148a02914b2e49361001a
SHA1:
c2d7ad29558b9e61bfe6ca2d4d6161f927f22c0e
SHA256:
44A82AC5D372023393A5186D3AA6C43499B98AC4BD83FA9D387165D8D755AE31
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
70a320ad559f4145464a9a70c4ae5d79
SHA1:
b3c629a3186d1f906358bac3a085540168a099e5
SHA256:
358B4374C8B8414C08865AA2EB43E91E127233528DCDD4CBA24728290D35BE0D
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
e8a5944dd48f5a2325f1c6e0bae8a997
SHA1:
bd23b25a5b0f6744afe9e3e4fb123a2032219287
SHA256:
AD1D0FFAE5DAAC1FA6EECAFA591A460B6571F78280A33BBEB971DE1D39C64480
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
ca1b4adf914dd0dc9ebcba6744c6f38c
SHA1:
4fdea7e24003410259a05a3d4edfd6ec86ef91c7
SHA256:
5FB0E9231201A5F54A3E32FEA209876A822B05BCBDF69F179F6524E5F26F4878
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
3518f07ee56e5c053f067d10a6c521c2
SHA1:
6aaf47d68a2cf5e0ce78cfd1639dd68714fcdb79
SHA256:
B6D5F92DF7D6FC17CDEF9726128557EE2D62D91FAFBC89B18C1232581FC2D47B
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
7688d3261d8a00ac7a632829c4568faa
SHA1:
02d813d181dde7c27320cbecd01cfa354bcbc207
SHA256:
7171AD97FDC0ABA6EC3806BDE83347E306A1C426B2645FB47B7D017E41D829A3
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
892578b9e2b841f197ff0936ef12b6a1
SHA1:
132ddc5aa48e10d673d603da288f36eb767433a6
SHA256:
BD137D144F527BBA201761752573D7C78E933625EE43AD5579350DD7E46E72CD
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
18b86eaefd9d0e0a0caf0b0319bc0a47
SHA1:
9c9db116d630fb7b8a223374672a3ad1385bf792
SHA256:
E9F468234333E8903D44EDF40E7E7E0CE7BD08453FEDCE237C00A58204E36D10
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
3ea6ab4464fc7ad96f81f4f6c3516133
SHA1:
4f640806d7ec0c6fa71ade4e622e914a16f2f784
SHA256:
7364067AEF6CD2A60ACF6C6A1C5236CB0D34FCC4D636998E3320D342BC68C8B3
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
e867197b5ebe395f5e48adea1299de21
SHA1:
66eeb0269404f29909d7617cafdc883df58e91e9
SHA256:
0D05C13D8EA2AAB2A81053570253B9D178CCD499A2142BAF75F9486DB5EAB9D3
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
eb9e0a1af4c98a972c16cfa362d10a34
SHA1:
074f496502cbc6811fdbaaea51cc83f200987bf2
SHA256:
04938503D10C37E22186C1A899D3C7B306BFE4ADCDCEF7284D767E6782CF2F04
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
b72b734b3d6b00f8a0c1b0852d6505e7
SHA1:
cec040bf65948a4f5bf21e7ebff42cf461514f78
SHA256:
10B7F4225180C9A5B631FEFF2512AAB551D1CF18595C21FABBE1F0F5B17CD440
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
a098d1c34dc3dc3b910095386b69969d
SHA1:
39dd2553666b1a24f9375da3c3833fcb6bd0f674
SHA256:
6C80309D43119049A80C2592A27EDDEAE5DBDAE865B4C3780DC2CB866EB6F72B
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
680dc7f13e76fa043a8f61787e5ea25d
SHA1:
a33d3410468a7f6de90e12583fd58f041ddf5604
SHA256:
3C3F78E491B967240AEA71CFB1D083249B5D3AA25E58890D3A2A4AF2A4F70A5C
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
bc4a936c1b6b826fb58cec3a26d49b0b
SHA1:
b4851159fee26d65f4152c39ab6f89c301e5ad89
SHA256:
A3ACA0EDE2A6EC253D07F14339837C1B752509D02AFCE117A49A9E0512411AB1
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
87ff55f849484d51931171081f5f97a8
SHA1:
e1b7e09522a66f6c4041962cf94db25e413fd41e
SHA256:
F7CEB0D1EC6C56738F3B270AAAF9CFFA2CC2FA60259B7614F0367EC92DA7A515
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
499278284b000845cfd18ad1c6472470
SHA1:
be9684fd434c947c2fc32efb51601f6c73916ae1
SHA256:
10A4AD67E21CE081A58F42663D8D353D137F45BD21BF662BCBD03BFDBC3C0F1E
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
e2aec91af5a8293ae827fcdcc114c895
SHA1:
2350dfe65da1ef67fb0c5faa127fd937bd796c40
SHA256:
68C120D74FCB03DE8715F2945918FF818104A3685C072C4444C6A30C6D28FFC9
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
b882250536aadc0ba757fc7d88f691d8
SHA1:
4ddfbb2995f928139b78e9830c9f6cbe76a1e270
SHA256:
27196FD48DFA869057BDEE56D056B6E6A84617D9CF0A1545FF1D1CA5C58E209A
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
cb57c80c9afe9cd8e38b88a40be39dee
SHA1:
f08ce79541e5a29512628624d5342a442137ed14
SHA256:
7AA28ED9F8B4CAB8118F047C92A2B358BAFB107AFFF15AA2A96E8A7081CEB8AD
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
aebdb9ce57f63f980e215753b8fab7f1
SHA1:
49b91c768addaa35c621aec323775d44389bdb73
SHA256:
6315F69EAD9A1B6FA503FD303FDFEC0698FB4B03409ECD5389039A4BAF7E2631
File Size:
12.80 KB, 12800 bytes
|
|
MD5:
49fad453422c6eac141f3656dcec27a5
SHA1:
97f516f62cdca36c0846e4ce2f8402c27aa4ceae
SHA256:
70ADD1AAB071AA2DCAA77150D25444554399E5913E0BE66FE6D30CEBD0FED0E5
File Size:
12.80 KB, 12800 bytes
|
Windows Portable Executable Attributes
- File doesn't have "Rich" header
- File doesn't have debug information
- File doesn't have exports table
- File doesn't have security information
- File is .NET application
- File is 32-bit executable
- File is console application (IMAGE_SUBSYSTEM_WINDOWS_CUI)
- File is either console or GUI application
- File is not packed
- IMAGE_FILE_DLL is not set inside PE header (Executable)
Show More
- IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)
Windows PE Version Information
Windows PE Version Information
This section displays values and attributes that have been set in the Windows file version information data structure for samples within this family. To mislead users, malware actors often add fake version information mimicking legitimate software.| Name | Value |
|---|---|
| Assembly Version | 0.0.0.0 |
| File Version | 0.0.0.0 |
| Internal Name |
|
| Original Filename |
|
| Product Version | 0.0.0.0 |
File Traits
- .NET
- x86
Block Information
Block Information
During analysis, EnigmaSoft breaks file samples into logical blocks for classification and comparison with other samples. Blocks can be used to generate malware detection rules and to group file samples into families based on shared source code, functionality and other distinguishing attributes and characteristics. This section lists a summary of this block data, as well as its classification by EnigmaSoft. A visual representation of the block data is also displayed, where available.| Total Blocks: | 19 |
|---|---|
| Potentially Malicious Blocks: | 12 |
| Whitelisted Blocks: | 7 |
| Unknown Blocks: | 0 |
Visual Map
? - Unknown Block
x - Potentially Malicious Block
Similar Families
Similar Families
This section lists other families that share similarities with this family, based on EnigmaSoft’s analysis. Many malware families are created from the same malware toolkits and use the same packing and encryption techniques but uniquely extend functionality. Similar families may also share source code, attributes, icons, subcomponents, compromised and/or invalid digital signatures, and network characteristics. Researchers leverage these similarities to rapidly and effectively triage file samples and extend malware detection rules.- MSIL.CaptureScreen.A
Windows API Usage
Windows API Usage
This section lists Windows API calls that are used by the samples in this family. Windows API usage analysis is a valuable tool that can help identify malicious activity, such as keylogging, security privilege escalation, data encryption, data exfiltration, interference with antivirus software, and network request manipulation.| Category | API |
|---|---|
| Syscall Use |
Show More
|
| User Data Access |
|