Information about $R0DJ9QO.exe
- File Details
- Overview
- Analysis
$R0DJ9QO.exe
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
4bb68ef23f5e0947108e7635e19d69c8 |
| Size: |
9 MB |
| First Published: |
2017-11-03 13:06:38 (6 years ago) |
| Latest Published: |
2017-11-03 13:06:38 (6 years ago) |
| Status: |
Undefined (on last analysis) |
|
| Analysis Date: |
2017-11-03 13:06:38 (6 years ago) |
Overview
| Signed By: |
Gridinsoft, LLC |
| Status: |
Invalid (digital signature could be stolen or file could be patched) |
| %sysdrive%\$recycle.bin\s-1-5-21-2318787876-21290211-1101339429-1000 |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x005f3e78 |
| Name |
Size of data |
MD5 |
| .text |
6215168 |
efd82ad464699b20df9e9f12ccaea35e |
| .itext |
20992 |
daa49236efa2ad34c5608e2d880d5a5f |
| .data |
145408 |
9599ce8e9b94a37bc685c3ccdda32041 |
| .bss |
0 |
00000000000000000000000000000000 |
| .idata |
20480 |
66d37601d63a455ca0c80ecf314d3654 |
| .didata |
6144 |
62c2a8e1e4683500f56612f9a9414dd3 |
| .edata |
512 |
da59cbf35854eb096a32c2747212be6f |
| .tls |
0 |
00000000000000000000000000000000 |
| .rdata |
512 |
99d1977a2ecade38afa63f93eb7821d4 |
| .reloc |
547328 |
197aa4f5eb88785431c7b2a5ca65e3b3 |
| .rsrc |
2702336 |
850a267b3b2cdeb44eafc1820cf91c60 |
