How to remove $RJ6M8O3.exe
- File Details
- Overview
- Analysis
$RJ6M8O3.exe
The module $RJ6M8O3.exe has been detected as Trojan.Sabsik
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
6f1a436f28cb5386b19c15fb6de09d42 |
| Size: |
1 MB |
| First Published: |
2025-01-01 23:02:41 (5 months ago) |
| Latest Published: |
2025-04-28 23:01:32 (a month ago) |
| Status: |
Trojan.Sabsik (on last analysis) |
|
| Analysis Date: |
2025-04-28 23:01:32 (a month ago) |
| %sysdrive%\$recycle.bin |
| %sysdrive%\genp\adobe-genp-3.4.2-cgp\adobe-genp-3.4.2-cgp |
| %sysdrive%\genp\adobe-genp-3.4.2-cgp.zip\adobe-genp-3.4.2-cgp |
| %sysdrive%\$recycle.bin |
| %profile%\downloads\aps2025.v26.2.0.x64.techwar3z.org\adobe photoshop 2025 v26.2.0 (x64)\adobe-genp-3.4.2-cgp.rar |
| %programfiles%\adobe\adobe after effects 2025\support files\adobe-genp-3.4.2-cgp version |
| Italy |
33.3% |
|
| Nigeria |
33.3% |
|
| Mexico |
16.7% |
|
| South Korea |
16.7% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x0002549c |
| Name |
Size of data |
MD5 |
| .text |
734208 |
507a8505198e35cc9675301d53e3b1c4 |
| .rdata |
214016 |
9eda36be0cf076085a2f9772c1ee5803 |
| .data |
20480 |
ec6b77d6ef8898b0d3b7d48c042d66a0 |
| .pdata |
28672 |
4416e27f8be9f9271c439d2fd34d1b2d |
| .rsrc |
285696 |
2c3ebd899bd317e214e78540c82397a9 |
| .reloc |
3072 |
5ddb0e422ace102fe530e589a0cbec6f |
