How to remove $R13QQNN.exe
- File Details
- Overview
- Analysis
$R13QQNN.exe
The module $R13QQNN.exe has been detected as PUP.MailRu
File Details
| Product Name: |
|
| MD5: |
c4a9436128d1caac9e0bfd64b1d4e88f |
| Size: |
35 MB |
| First Published: |
2018-04-22 06:04:52 (6 years ago) |
| Latest Published: |
2018-12-18 16:04:45 (5 years ago) |
| Status: |
PUP.MailRu (on last analysis) |
|
| Analysis Date: |
2018-12-18 16:04:45 (5 years ago) |
Overview
| Signed By: |
LLC Mail.Ru |
| Status: |
Invalid (digital signature could be stolen or file could be patched) |
| %profile%\s-44\мои документы\downloads |
| %sysdrive%\$recycle.bin |
| %profile% |
| %sysdrive%\файлы |
| %desktop% |
| %sysdrive%\downloads |
| %profile% |
| icq_rfrset.exe |
| $R13QQNN.exe |
| icq_rfrset_b6fcc0f7.exe |
| icq_rfrset_18f7fef8.exe |
| icq_rfrset_d89d25d6.exe |
| roblox-code-generator-no.exe |
| icq_rfrset_248bd4e1.exe |
| telecharger-driver-epson-stylus-cx4300.exe |
| icq_rfrset_d2d877c7.exe |
| TeamViewer_Setup.132.1.3629.sanet.cd.exe |
| icq_rfrset_1013a1c4.exe |
| icq_rfrset_3eb9f2ac.exe |
|
57.1% |
|
|
7.1% |
|
|
7.1% |
|
|
7.1% |
|
|
7.1% |
|
|
7.1% |
|
|
7.1% |
|
| Windows 10 |
42.9% |
|
| Windows 7 |
28.6% |
|
| Windows 8.1 |
21.4% |
|
| Windows XP |
7.1% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00008251 |
| Name |
Size of data |
MD5 |
| .text |
128000 |
543cede53ccd9af35b43c2ae8d6697bf |
| .rdata |
58880 |
5c46d8a00952cb52a727ffc65c4f86d6 |
| .data |
3584 |
af397804b4c899468dfdf09e6404e1b5 |
| .rsrc |
37030912 |
29e7d2cb64e335da61176f3833c1bf61 |
| .reloc |
8192 |
e60c78a41a96d7d1f2dcabc54832c56b |
