Information about $RQHLVF6.exe

$RQHLVF6.exe

File Details

Product Name:

Narapukih

Company Name:

MD5: 57fb46a065980f6e37fe3a3fdc33fb9a
Size: 1 MB
First Published: 2017-07-23 14:08:44 (7 years ago)
Latest Published: 2017-07-23 14:08:44 (7 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2017-07-23 14:08:44 (7 years ago)

Overview

Signed By: SpeedyPrompt (New Media Holdings Ltd)
Status: Invalid (digital signature could be stolen or file could be patched)

Common Places:

%sysdrive%\$recycle.bin\s-1-5-21-3194564192-608875707-2597642512-1000

Geography:

100.0%

OS Version:

Windows 7 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00009c40

PE Sections:

Name Size of data MD5
CODE 37888 d72b91b877ba69ce51658dd6434a3045
DATA 1024 d5ea23d4ecf110fd2591314cbaa84278
BSS 0 00000000000000000000000000000000
.idata 2560 bb5485bf968b970e5ea81292af2acdba
.tls 0 00000000000000000000000000000000
.rdata 512 9ba824905bf9c7922b6fc87a38b74366
.reloc 0 00000000000000000000000000000000
.rsrc 38400 d9ec619556010a63e8e1545b681bda01

More information:

Search on Virustotal
copyright for information about $RQHLVF6.exe