How to remove Re-LoaderByR@1n.exe
- File Details
- Overview
- Analysis
Re-LoaderByR@1n.exe
The module Re-LoaderByR@1n.exe has been detected as Hack.KMS
File Details
| Product Name: |
|
| MD5: |
5f0698550d99df790e94ca228dd0c02a |
| Size: |
2 MB |
| First Published: |
2018-10-13 22:07:44 (5 years ago) |
| Latest Published: |
2019-11-11 14:18:36 (4 years ago) |
| Status: |
Hack.KMS (on last analysis) |
|
| Analysis Date: |
2019-11-11 14:18:36 (4 years ago) |
| %sysdrive%\pliki |
| %sysdrive%\программы\утилиты\активатор winxp\re-loader_v13rc2_svn14042015_1200.rar |
| %sysdrive%\софт\проги |
| %sysdrive%\msoffice2016\en_office_professional_plus_2016_x86_x64_dvd_6962141\windows.office.activator.re-loader.v1.3.pefelie.net.zip |
| Windows 7 |
50.0% |
|
| Windows XP |
25.0% |
|
| Windows 10 |
25.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00002e5e |
| MVID: |
6b932d2d-0435-432e-85ef-10c5f838e8f1 |
| Name |
Size of data |
MD5 |
| .text |
4096 |
d1835cae313440d6300e8f769dfd7a98 |
| .rsrc |
104448 |
bab43f2cbbc6252f1aa11ecc7f8bbebc |
| .reloc |
512 |
403150c0048f10e46dff1edf4919eb6b |
