How to remove $RB8IQAU.exe
- File Details
- Overview
- Analysis
$RB8IQAU.exe
The module $RB8IQAU.exe has been detected as Ransom.STOP
File Details
| Product Name: |
|
| MD5: |
ab07f9804dd13fc897a07eb65e58166a |
| Size: |
4 MB |
| First Published: |
2024-05-08 23:00:54 (2 years ago) |
| Latest Published: |
2024-05-08 23:00:55 (2 years ago) |
| Status: |
Ransom.STOP (on last analysis) |
|
| Analysis Date: |
2024-05-08 23:00:55 (2 years ago) |
Overview
| %sysdrive%\$recycle.bin |
| %sysdrive%\$recycle.bin |
| %sysdrive%\$recycle.bin |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00004191 |
| Name |
Size of data |
MD5 |
| .text |
68608 |
edfd52255116509aded89c4619e719b9 |
| .rdata |
28160 |
f5e158a2dfd31f07783997ad3df4c288 |
| .data |
4170240 |
7a903c85b42aba68117cfdf1ca06f944 |
| .rsrc |
135168 |
70ff1dba377dc085d9af0df1f3f46f6b |