How to remove $R5DZZN2.exe
- File Details
- Overview
- Analysis
$R5DZZN2.exe
The module $R5DZZN2.exe has been detected as Hack.Patched
File Details
Product Name: |
|
Company Name: |
|
MD5: |
de0b18b3776f92c4f885793078b53f0d |
Size: |
153 KB |
First Published: |
2018-06-10 09:17:00 (6 years ago) |
Latest Published: |
2020-10-09 13:14:49 (4 years ago) |
Status: |
Hack.Patched (on last analysis) |
|
Analysis Date: |
2020-10-09 13:14:49 (4 years ago) |
%temp%\rar$exb0.467 |
%temp%\rar$exb0.723 |
%temp%\rar$exb0.262 |
%desktop% |
%temp%\rar$exb0.919 |
%profile%\downloads\temp |
%sysdrive%\$recycle.bin |
%profile%\downloads\am.3.2.15\am.3.2.15\gridinsoft am 3.2.15 |
%temp%\rar$exb0.879 |
%temp%\rar$exb0.270 |
GridinSoftAnti-MalwarePortable.exe |
$R5DZZN2.exe |
$RXKSSQY.exe |
$R20W7ZE.exe |
|
43.6% |
|
|
16.5% |
|
|
10.0% |
|
|
3.8% |
|
|
3.6% |
|
|
2.5% |
|
|
2.1% |
|
|
2.1% |
|
|
2.1% |
|
|
1.9% |
|
|
1.7% |
|
|
1.3% |
|
|
1.2% |
|
|
0.8% |
|
|
0.8% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
Windows 10 |
47.4% |
|
Windows 7 |
38.9% |
|
Windows 8.1 |
7.0% |
|
Windows XP |
3.4% |
|
Windows Embedded 8.1 |
1.1% |
|
Windows 8 |
1.0% |
|
Windows Server 2012 R2 |
0.8% |
|
Windows Vista |
0.2% |
|
Windows Server 2008 R2 |
0.2% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x000039e3 |
Name |
Size of data |
MD5 |
.text |
28672 |
f569e353af0ed51bf4c216faa9bed4e7 |
.rdata |
11264 |
91eee43954e068e650f7b73a8b0e6915 |
.data |
512 |
db9f7acbf1c3ddfe255077b699955dfa |
.ndata |
0 |
00000000000000000000000000000000 |
.rsrc |
17920 |
a87fbb8a3f605b5e334bb24fe4f84cd3 |
.reloc |
4096 |
9a781e265dc6e22ff36a7a0f69807c59 |