How to remove $RG7HJIC.exe
- File Details
- Overview
- Analysis
$RG7HJIC.exe
The module $RG7HJIC.exe has been detected as PUP.Gen
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
f21dd122da350d4447013c7bffe56682 |
| Size: |
3 MB |
| First Published: |
2017-06-21 13:04:59 (6 years ago) |
| Latest Published: |
2018-10-22 10:13:56 (5 years ago) |
| Status: |
PUP.Gen (on last analysis) |
|
| Analysis Date: |
2018-10-22 10:13:56 (5 years ago) |
Overview
| %localappdata%\temp |
| %temp%\2383632571 |
| %sysdrive%\temp |
| %temp%\1288822419 |
| %sysdrive%\$recycle.bin\s-1-5-21-1740714470-2693033549-541736218-1001 |
| %temp% |
| ww-Online.IO-installer.exe |
| $RG7HJIC.exe |
| awh7F1F.tmp |
| us-Online.IO-installer.exe |
| $RAJQVBP.exe |
|
17.1% |
|
|
13.4% |
|
|
11.1% |
|
|
6.0% |
|
|
3.7% |
|
|
3.2% |
|
|
3.2% |
|
|
3.2% |
|
|
2.8% |
|
|
2.3% |
|
|
2.3% |
|
|
1.8% |
|
|
1.8% |
|
|
1.8% |
|
|
1.8% |
|
|
1.8% |
|
|
1.8% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
0.9% |
|
|
0.9% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
| Windows 10 |
43.0% |
|
| Windows 7 |
37.6% |
|
| Windows 8.1 |
16.7% |
|
| Windows 8 |
1.4% |
|
| Windows Vista |
1.4% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000ced52 |
| Name |
Size of data |
MD5 |
| .text |
1142784 |
0479aac37b2e343e745214c3663eb542 |
| .rdata |
345088 |
4396d62978909c759d72a7b3c5d16890 |
| .data |
21504 |
97f774b906368e2c9b01a32482c7be4a |
| .gfids |
1024 |
1d01940232fc680ad499a40438e6be5e |
| .tls |
512 |
1f354d76203061bfdd5a53dae48d5435 |
| .rsrc |
425472 |
999efbc86077bf41ab0cb70bbb507841 |
| .reloc |
86016 |
b6be08b822ccd41ce51fc467b508acac |
