How to remove $R3DN60I.exe
- File Details
- Overview
- Analysis
$R3DN60I.exe
The module $R3DN60I.exe has been detected as Trojan.Agent
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
ee1e0fbd50513d11ff554f7996ff6cc8 |
| Size: |
919 KB |
| First Published: |
2017-07-27 12:06:08 (7 years ago) |
| Latest Published: |
2020-01-09 00:24:46 (5 years ago) |
| Status: |
Trojan.Agent (on last analysis) |
|
| Analysis Date: |
2020-01-09 00:24:46 (5 years ago) |
Overview
| Signed By: |
ROSTPEI LTD |
| Status: |
Invalid (digital signature could be stolen or file could be patched) |
| %favorites%\libgnutls-28.dll.zip |
| %sysdrive%\$recycle.bin\s-1-5-21-1269281579-4139483599-133784659-1000\$r4kfjzn.zip |
| %profile%\downloads\fwpuclnt.dll.zip |
| %sysdrive%\$recycle.bin\s-1-5-21-1524414771-621574309-1755834798-1000 |
| %system%\d3dx9_43.dll.zip |
| %system%\x3daudio1_7.dll.zip |
| %system%\xinput1_3.dll.zip |
| %desktop% |
| %profile%\downloads |
| %temp% |
| InstallerCC.exe |
| $R3DN60I.exe |
| A0041751.exe |
|
41.5% |
|
|
17.1% |
|
|
9.3% |
|
|
6.2% |
|
|
3.1% |
|
|
3.1% |
|
|
2.6% |
|
|
2.1% |
|
|
2.1% |
|
|
1.6% |
|
|
1.6% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
| Windows 7 |
43.3% |
|
| Windows 10 |
39.2% |
|
| Windows 8.1 |
12.4% |
|
| Windows XP |
3.1% |
|
| Windows 8 |
1.5% |
|
| Windows Server 2008 R2 |
0.5% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x002bd520 |
| Name |
Size of data |
MD5 |
| UPX0 |
0 |
00000000000000000000000000000000 |
| UPX1 |
922112 |
57b12990623557fcdc3cebedc050d0ee |
| .rsrc |
12288 |
ea7a774cdad8b337b89fe7993aa68dea |
