How to remove $R56BWYQ.exe
- File Details
- Overview
- Analysis
$R56BWYQ.exe
The module $R56BWYQ.exe has been detected as Adware.Downloader
File Details
| MD5: |
6fb6a988fa159c2b447b8fb1486b94c0 |
| Size: |
1 MB |
| First Published: |
2017-05-26 18:08:28 (6 years ago) |
| Latest Published: |
2017-09-12 10:02:35 (6 years ago) |
| Status: |
Adware.Downloader (on last analysis) |
|
| Analysis Date: |
2017-09-12 10:02:35 (6 years ago) |
Overview
| %sysdrive%\$recycle.bin\s-1-5-21-18759952-2687797662-2011857281-1001 |
| %profile%\downloads |
| $RPSRW3W.exe |
| $R56BWYQ.exe |
| InstallPack_1e0ad.exe |
| Windows 8.1 |
66.7% |
|
| Windows 10 |
33.3% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0001942f |
| Name |
Size of data |
MD5 |
| .text |
101888 |
0c04e49d78a3c453186c916e6f29540d |
| .rdata |
15360 |
1eff757b36a6b7a599236ac8b1b35b4d |
| .data |
2560 |
21d5c7a8ba54658b1e07909bf1045c79 |
| .rsrc |
84992 |
179c17f2cdbae5561766dd463405bef4 |
