How to remove $R7IM69V.exe
- File Details
- Overview
- Analysis
$R7IM69V.exe
The module $R7IM69V.exe has been detected as PUP.OfferCore
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
32710bfba1858421cbf383e6f5c1ad8d |
| Size: |
1 MB |
| First Published: |
2024-10-29 23:01:05 (a week ago) |
| Latest Published: |
2024-11-06 23:07:14 (2 hours ago) |
| Status: |
PUP.OfferCore (on last analysis) |
|
| Analysis Date: |
2024-11-06 23:07:14 (2 hours ago) |
Overview
| %sysdrive%\$recycle.bin |
| %sysdrive%\$recycle.bin |
| %sysdrive%\$recycle.bin |
| %desktop% |
| Windows 7 |
75.0% |
|
| Windows 10 |
25.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000a83bc |
| Name |
Size of data |
MD5 |
| .text |
677888 |
b889d302f6fc48a904de33d8d947ae80 |
| .itext |
7168 |
588dd0a8ab499300d3701cbd11b017d9 |
| .data |
14848 |
5c0c76e77aef52ebc6702430837ccb6e |
| .bss |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .idata |
4096 |
627340dff539ef99048969aa4824fb2d |
| .didata |
512 |
fd11c1109737963cc6cb7258063abfd6 |
| .edata |
512 |
7de8ca0c7a61668a728fd3a88dc0942d |
| .tls |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .rdata |
512 |
d84006640084dc9f74a07c2ff9c7d656 |
| .reloc |
69632 |
a85fda2741bd9417695daa5fc5a9d7a5 |
| .rsrc |
53760 |
9ad3dba767d58ca99bd4ede2f6eae181 |
