How to remove arh.exe
arh.exe
The module arh.exe has been detected as Virus.Neshta

File Details
MD5: | 11f25766306c5ce5c8838e4e92877a5e |
Size: | 126 KB |
First Published: | 2017-08-04 17:09:46 (7 years ago) |
Latest Published: | 2024-08-01 23:04:49 (10 months ago) |
Status: | Virus.Neshta (on last analysis) | |
Analysis Date: | 2024-08-01 23:04:49 (10 months ago) |
Common Places:
%programfiles%\adobe\reader 11.0\reader |
%programfiles%\adobe\acrobat 11.0\acrobat |
%programfiles%\adobe\acrobat 11.0 |
%programfiles%\adobe\reader 11.0 |
%programfiles%\adobe\reader 11.0 |
%programfiles%\adobe\reader 11.0 |
%programfiles%\adobe\reader 11.0 |
%programfiles%\adobe\reader 11.0 |
Geography:
20.0% | ||
20.0% | ||
20.0% | ||
20.0% | ||
10.0% | ||
10.0% |
OS Version:
Windows 10 | 62.5% | |
Windows 7 | 37.5% |
Analysis
Subsystem: | Windows GUI |
PE Type: | pe |
OS Bitness: | 32 |
Image Base: | 0x00400000 |
Entry Address: | 0x000080e4 |
PE Sections:
Name | Size of data | MD5 |
CODE | 29696 | ca3464d4f08c9010e7ffa2fe3e890344 |
DATA | 1024 | 7ffc3168a7f3103634abdf3a768ed128 |
BSS | 0 | 00000000000000000000000000000000 |
.idata | 2560 | 6e7a45521bfca94f1e506361f70e7261 |
.tls | 0 | 00000000000000000000000000000000 |
.rdata | 512 | 7e6c0f4f4435abc870eb550d5072bad6 |
.reloc | 1536 | 16968c66d220638496d6b095f21de777 |
.rsrc | 5120 | 0bda792e1a4385a8c5dce49ce9bdec9e |
More information:
Download GridinSoft
Anti-Malware - Removal tool for arh.exe
