How to remove AA3.exe
AA3.exe
The module AA3.exe has been detected as Risk.RemoteAdmin
File Details
| Product Name: | Ammyy Admin |
| Company Name: | Ammyy LLC |
| MD5: | b9b5ca19815cd592e7a4113076839b7c |
| Size: | 701 KB |
| First Published: | 2018-05-14 11:12:07 (5 years ago) |
| Latest Published: | 2020-08-08 13:34:06 (3 years ago) |
| Status: | Risk.RemoteAdmin (on last analysis) | |
| Analysis Date: | 2020-08-08 13:34:06 (3 years ago) |
Overview
| Signed By: | Ammyy |
| Status: | Valid |
Common Places:
| %sysdrive%\javadddddddddd\01_ischool |
| %sysdrive%\javadddddddddd\01_ischool\ischool\01_ischool |
| %sysdrive%\kormee doc\kormee backup 16 april14 |
| %desktop% |
| %sysdrive%\kormee backup |
| %sysdrive%\obmen_old |
| %sysdrive% |
| %profile% |
| %programfiles%\symen\enativ |
| %sysdrive%\bmwdata\22_hr\administrator_benz\hr&admin\pamika\เปมิกา2019 |
File Names:
| AA_v3.exe |
| AA3.exe |
| ammyy.exe |
Geography:
| 31.6% | ||
| 31.6% | ||
| 10.5% | ||
| 5.3% | ||
| 5.3% | ||
| 5.3% | ||
| 5.3% | ||
| 5.3% |
OS Version:
| Windows 7 | 88.9% | |
| Windows XP | 5.6% | |
| Windows Server 2016 | 5.6% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x00076e0e |
PE Sections:
| Name | Size of data | MD5 |
| .text | 507904 | 7195a4f0a81c1dd8c44943ed58e7aef6 |
| .rdata | 69632 | 4877fd8dd872401a312c92c843823b38 |
| .data | 86016 | a72c37ecae4f669f3ec63269ec6e7af6 |
| .rsrc | 45056 | c462b2c4a47432c0c2db45e74b0b94be |
More information:
Download GridinSoft
Anti-Malware - Removal tool for AA3.exe
