How to remove $RQI4D9E.exe
- File Details
- Overview
- Analysis
$RQI4D9E.exe
The module $RQI4D9E.exe has been detected as PUP.Reimage
File Details
Product Name: |
|
Company Name: |
|
MD5: |
3f7501ea6c2f94d9bc56d93c42229eeb |
Size: |
362 KB |
First Published: |
2017-09-14 08:07:59 (7 years ago) |
Latest Published: |
2024-04-01 23:07:06 (a year ago) |
Status: |
PUP.Reimage (on last analysis) |
|
Analysis Date: |
2024-04-01 23:07:06 (a year ago) |
Overview
%sysdrive%\adwcleaner\quarantine\rqf69azbla\reimage protector |
%programfiles%\reimage\reimage protector |
%sysdrive%\$recycle.bin\s-1-5-21-3105691898-2115697996-2128765382-1000 |
%sysdrive%\system volume information\_restore{b27e5c6a-35d1-4c73-bc02-db61c65223dc}\rp517 |
%sysdrive%\system volume information\_restore{f2e492a9-4c73-4e78-a2f9-6bab01221544}\rp717 |
%sysdrive%\adwcleaner\quarantine\fraqbc8wsa\reimage protector |
%sysdrive%\adwcleaner\quarantine\gxix4a2dre\reimage protector |
%sysdrive%\vtroot\harddiskvolume1\program files\reimage\reimage protector |
%sysdrive%\archivos de programa\reimage\reimage protector |
%programfiles%\reimage |
ProtectorUpdater.exe |
$RQI4D9E.exe |
A0097832.exe |
A0184126.exe |
A0018933.exe |
A0194936.exe |
A0569431.exe |
A1166222.exe |
A0477262.exe |
|
12.3% |
|
|
7.9% |
|
|
6.6% |
|
|
6.2% |
|
|
6.2% |
|
|
5.7% |
|
|
4.4% |
|
|
3.1% |
|
|
3.1% |
|
|
2.6% |
|
|
2.6% |
|
|
2.6% |
|
|
2.6% |
|
|
2.2% |
|
|
2.2% |
|
|
2.2% |
|
|
2.2% |
|
|
2.2% |
|
|
1.8% |
|
|
1.8% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
Windows 7 |
59.2% |
|
Windows XP |
18.0% |
|
Windows 10 |
17.1% |
|
Windows 8.1 |
3.1% |
|
Windows Vista |
1.8% |
|
Windows 8 |
0.9% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x000038af |
Name |
Size of data |
MD5 |
.text |
29696 |
419d4e1be1ac35a5db9c47f553b27cea |
.rdata |
11264 |
cca1ca3fbf99570f6de9b43ce767f368 |
.data |
512 |
77f0839f8ebea31040e462523e1c770e |
.ndata |
0 |
00000000000000000000000000000000 |
.rsrc |
39424 |
c6fafae55de6835697fe829a1b3067a7 |
.reloc |
4096 |
fb7cf9f395f2ff1908964210e14c3e74 |