How to remove $R24ZHP1.exe
- File Details
- Overview
- Analysis
$R24ZHP1.exe
The module $R24ZHP1.exe has been detected as Adware.Downloader
File Details
MD5: |
8237549d0f3175eb29b0f4fe0b641364 |
Size: |
5 MB |
First Published: |
2022-11-29 23:53:13 (2 years ago) |
Latest Published: |
2023-05-24 23:16:56 (2 years ago) |
Status: |
Adware.Downloader (on last analysis) |
|
Analysis Date: |
2023-05-24 23:16:56 (2 years ago) |
Overview
%sysdrive%\$recycle.bin |
%desktop%\archivos para grabar\para grabar\varios |
%profile%\downloads\bernina b70\programas de bordado |
%profile%\downloads\bernina b70\programas de bordado |
%profile%\downloads\bernina b70\programas de bordado |
%profile%\downloads\bernina b70 |
%profile% |
%profile% |
%profile%\downloads\bernina b70\programas de bordado |
%profile% |
Kazakhstan |
70.0% |
|
Spain |
20.0% |
|
Mexico |
10.0% |
|
Windows 10 |
90.0% |
|
Windows 7 |
10.0% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x003886d0 |
Name |
Size of data |
MD5 |
.text |
4295680 |
85796b228e50e152016c02226fd64dd0 |
.rdata |
1108480 |
00ef8b064604c7c6d2d3e371e3565ad5 |
.data |
146944 |
43ade20a028f5a9a2623f205fe925e39 |
.rsrc |
102912 |
5745cda31f19df27b929947026554a6e |
.reloc |
305664 |
fd3a84a4d59c232441eb7111b42d481e |