Information about $RNHFUFU.exe

$RNHFUFU.exe

File Details

MD5: e8d881a1b20f0f4afb3edb1af0c7afbb
Size: 1 MB
First Published: 2017-05-31 22:04:17 (6 years ago)
Latest Published: 2018-01-18 18:11:27 (6 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2018-01-18 18:11:27 (6 years ago)

Overview

Signed By: CEWE Stiftung @amp; Co KGaA
Status: Valid

Common Places:

%profile%\downloads
%sysdrive%\$recycle.bin\s-1-5-21-1814777049-3502919064-1366750866-1030
%sysdrive%\$recycle.bin

File Names:

setup_Phooto.exe
$RNHFUFU.exe

Geography:

100.0%

OS Version:

Windows 10 50.0%
Windows 8.1 50.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000030fa

PE Sections:

Name Size of data MD5
.text 24064 856b32eb77dfd6fb67f21d6543272da5
.rdata 5120 dc77f8a1e6985a4361c55642680ddb4f
.data 1024 7922d4ce117d7d5b3ac2cffe4b0b5e4f
.ndata 0 00000000000000000000000000000000
.rsrc 415232 863d12627555af8bf8ac6689e20e47e6

More information:

Search on Virustotal
copyright for information about $RNHFUFU.exe