How to remove $RNHS9FD.exe
- File Details
- Overview
- Analysis
$RNHS9FD.exe
The module $RNHS9FD.exe has been detected as Adware.ELEX
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
bb1460a86eced733d22923aa9aaf673a |
| Size: |
155 KB |
| First Published: |
2017-05-21 04:03:36 (7 years ago) |
| Latest Published: |
2019-04-10 02:37:36 (5 years ago) |
| Status: |
Adware.ELEX (on last analysis) |
|
| Analysis Date: |
2019-04-10 02:37:36 (5 years ago) |
Overview
| %programfiles%\firefox |
| %sysdrive%\adwcleaner\quarantine\files\elpsmjvvmbctzuzgymreqtfnlrfefdyb |
| %profile%\dropbox\farina\backup c\adwcleaner\quarantine\files\elpsmjvvmbctzuzgymreqtfnlrfefdyb |
| %sysdrive%\$recycle.bin\s-1-5-21-1992274373-2149420621-907573384-1000 |
| %sysdrive%\adwcleaner\quarantine\files\qivticfbhplowovmvofwbvcmqdkrzqie |
| %sysdrive%\adwcleaner\quarantine\files\brtzueofziatokksflqoyuuhpwqqkxer |
| %sysdrive%\adwcleaner\quarantine\files\ukyiiewribfnwsfajtujlibnuipogenb |
| %programfiles%\5901eb50_jumpeasy\sdirec |
| %programfiles% |
| %programfiles%\5901c7ea_jumpeasy |
| plugin-container.exe |
| $RNHS9FD.exe |
|
17.9% |
|
|
14.3% |
|
|
10.7% |
|
|
10.7% |
|
|
10.7% |
|
|
10.7% |
|
|
7.1% |
|
|
3.6% |
|
|
3.6% |
|
|
3.6% |
|
|
3.6% |
|
|
3.6% |
|
| Windows 7 |
46.4% |
|
| Windows 10 |
39.3% |
|
| Windows XP |
10.7% |
|
| Windows 8 |
3.6% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0000ee9b |
| Name |
Size of data |
MD5 |
| .text |
61440 |
42a72cce5be7cdaf12548f94766150d8 |
| .rdata |
82944 |
0f65ecd6e143ab2c7813a26b6d66f6ac |
| .data |
512 |
4bed3374e3e440ec88fa6059a173afc8 |
| .gfids |
512 |
6a9c72a06ef22efefe9f6ba9932b2e4d |
| .rsrc |
3072 |
34e0b2b3dd00f89ec7c811ebd11cc324 |
| .reloc |
4096 |
3b2740cdc4288e13a20e2550dc6b1bac |
