How to remove $RMD32VT.exe
- File Details
- Overview
- Analysis
$RMD32VT.exe
The module $RMD32VT.exe has been detected as PUP.YTDDownloader
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
dc678f36d11586da66d156cef7d2ae08 |
| Size: |
1 MB |
| First Published: |
2017-10-15 02:10:06 (7 years ago) |
| Latest Published: |
2020-02-18 19:27:37 (4 years ago) |
| Status: |
PUP.YTDDownloader (on last analysis) |
|
| Analysis Date: |
2020-02-18 19:27:37 (4 years ago) |
Overview
| %temp%\scoped_dir5104_2274 |
| %profile%\downloads |
| %sysdrive%\$recycle.bin\s-1-5-21-621412810-1004708021-3075448748-1001 |
| %profile%\downloads\programs |
| %profile% |
| %sysdrive% |
| %sysdrive%\fred |
| %mydoc% |
| %sysdrive%\downloads |
| %sysdrive%\software\windows\multimedia |
| setup-freeripmp3-frp.exe |
| $RMD32VT.exe |
| setup-freeripmp3-frp(1).exe |
| FrpSetup.exe |
| setup-57freeripmp3-frp.exe |
| setup-freeripmp3-frp (1).exe |
| setup-freeripmp3-frp (2).exe |
| FrpRipCDSetup.exe |
| FreeRIP_5.7.0.1_setup.exe |
|
20.0% |
|
|
17.3% |
|
|
12.0% |
|
|
9.3% |
|
|
8.0% |
|
|
8.0% |
|
|
6.7% |
|
|
5.3% |
|
|
5.3% |
|
|
2.7% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
| Windows 10 |
68.8% |
|
| Windows 7 |
22.1% |
|
| Windows 8.1 |
6.5% |
|
| Windows Vista |
1.3% |
|
| Windows 8 |
1.3% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000039e3 |
| Name |
Size of data |
MD5 |
| .text |
28672 |
f569e353af0ed51bf4c216faa9bed4e7 |
| .rdata |
11264 |
91eee43954e068e650f7b73a8b0e6915 |
| .data |
512 |
db9f7acbf1c3ddfe255077b699955dfa |
| .ndata |
0 |
00000000000000000000000000000000 |
| .rsrc |
99840 |
2a710ad0ed6864e5e54a997e4b0111eb |
| .reloc |
4096 |
8cc0b654336ee3cad8d4cdee2baccec9 |
