How to remove $RIBMY14.exe
- File Details
- Overview
- Analysis
$RIBMY14.exe
The module $RIBMY14.exe has been detected as Trojan.Agent
File Details
| Product Name: |
|
| MD5: |
8663c5a47468bd05a599bbe3b04ac66d |
| Size: |
294 KB |
| First Published: |
2018-01-12 13:06:46 (7 years ago) |
| Latest Published: |
2020-12-04 19:08:25 (4 years ago) |
| Status: |
Trojan.Agent (on last analysis) |
|
| Analysis Date: |
2020-12-04 19:08:25 (4 years ago) |
| %sysdrive%\софт |
| %sysdrive%\$recycle.bin |
| %desktop% |
| %profile%\downloads |
| %sysdrive%\victoria\backup set 2017-06-05 094050\backup files 2017-06-05 094050\backup files 2.zip\c\users\user\desktop\buhs |
| %sysdrive%\11\alawar_crack_1.3.rar |
| %sysdrive%\11 |
| %sysdrive%\alawar20 |
| %temp% |
| %profile%\downloads\новая папка (2)\awar |
| Aktivator_2013.exe |
| $RIBMY14.exe |
| Alawar.Games.Universal.Crack.2017.exe |
| Alawar_Crack_1.3.exe |
| Crack.exe |
| new_AlawarKey.exe |
| Aktivator_2014.exe |
| alawar.games.universal.crack.1.3.exe |
| Windows 10 |
58.3% |
|
| Windows 7 |
30.6% |
|
| Windows 8.1 |
11.1% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0002d5b0 |
| Name |
Size of data |
MD5 |
| .textbss |
0 |
00000000000000000000000000000000 |
| .text |
3397 |
c7660b3ec5e9ddd68a490312f030741f |
| .data |
286086 |
6a6c91f02dfbe68191857ffd127cf9a1 |
| .idata |
426 |
3b912f58503e29b03c897ac1021957dd |
| .rsrc |
9728 |
731ddabed456815d5f86e61b937fb825 |
