How to remove $R5WNNMW.exe
- File Details
- Overview
- Analysis
$R5WNNMW.exe
The module $R5WNNMW.exe has been detected as PUP.Pinaview
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
5a44e9415f6de60576bf5aea79311de6 |
| Size: |
283 KB |
| First Published: |
2024-08-08 23:01:12 (a year ago) |
| Latest Published: |
2025-08-08 23:02:45 (3 months ago) |
| Status: |
PUP.Pinaview (on last analysis) |
|
| Analysis Date: |
2025-08-08 23:02:45 (3 months ago) |
Overview
| %sysdrive%\$recycle.bin |
| %sysdrive%\$recycle.bin |
| %localappdata%\programs |
| %localappdata%\programs |
| %localappdata%\programs |
| %localappdata%\programs |
| %localappdata%\programs |
| %localappdata%\programs |
| %localappdata%\programs |
| %localappdata%\programs |
|
40.7% |
|
|
6.2% |
|
|
6.2% |
|
|
4.9% |
|
|
4.9% |
|
|
3.7% |
|
|
3.7% |
|
|
3.7% |
|
|
2.5% |
|
|
2.5% |
|
|
2.5% |
|
|
2.5% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
| Windows 10 |
98.8% |
|
| Windows 8.1 |
1.2% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0003ce96 |
| MVID: |
be599528-dc9a-41c6-b175-8b13fd8ff104 |
| Typelib ID: |
a6d25c6d-b29c-4534-ad8a-67a20422b779 |
| Name |
Size of data |
MD5 |
| .text |
241664 |
4e473aba66c00a3397190ae00408f1b0 |
| .rsrc |
24576 |
1dfde76557a0c7d50cc305d7cc9a7a7e |
| .reloc |
512 |
dea0504c9a085a0cacb11cb3f8b4f40d |
