How to remove $RFGNPA4.exe
- File Details
- Overview
- Analysis
$RFGNPA4.exe
The module $RFGNPA4.exe has been detected as General Threat
File Details
Product Name: |
|
Company Name: |
|
MD5: |
1c872c90613009e6b913b4a60707ae70 |
Size: |
3 MB |
First Published: |
2017-06-10 13:07:19 (7 years ago) |
Latest Published: |
2017-06-10 13:07:19 (7 years ago) |
Status: |
General Threat (on last analysis) |
|
Analysis Date: |
2017-06-10 13:07:19 (7 years ago) |
Overview
%sysdrive%\$recycle.bin\s-1-5-21-676496203-1856650065-4121117806-1001 |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00161048 |
Name |
Size of data |
MD5 |
CODE |
1442816 |
de22cc7f9fca3e8a1312ea8b89385b2f |
DATA |
841728 |
50e6a58d5b3baf3a6c9cfa998d1ff964 |
BSS |
0 |
00000000000000000000000000000000 |
.idata |
12800 |
065a33000f3089e0dd4cbc5394dba7a8 |
.tls |
0 |
00000000000000000000000000000000 |
.rdata |
512 |
341e0b45e7a5282fc1c0495fcd55993b |
.reloc |
107008 |
363b68b0fe265dc9a161d5692c2998cf |
.rsrc |
1112576 |
166d0dcc0a8ef5ebaf047da61bb7b282 |