How to remove qeeeee.exe
qeeeee.exe
The module qeeeee.exe has been detected as Backdoor.DarkKomet
File Details
| Product Name: | Remote Service Application |
| Company Name: | Microsoft Corp. |
| MD5: | 89688137f9549097b701acec7cd0b4e0 |
| Size: | 659 KB |
| First Published: | 2017-08-24 04:06:37 (6 years ago) |
| Latest Published: | 2017-08-24 04:06:37 (6 years ago) |
| Status: | Backdoor.DarkKomet (on last analysis) | |
| Analysis Date: | 2017-08-24 04:06:37 (6 years ago) |
Common Places:
| %mydoc%\msdcsc\afomwpszwhbc |
| %profile%\downloads |
File Names:
| msdcsc.exe |
| qeeeee.exe |
Geography:
| 100.0% |
OS Version:
| Windows 7 | 100.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x0008f888 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 580096 | 8067456c5dc713997e61924c501c8cb2 |
| .itext | 6656 | 3f63b5c2974302201afb8afa01b8ac10 |
| .data | 15872 | 81fa247370ecc3476b5c17086c0f2024 |
| .bss | 0 | 00000000000000000000000000000000 |
| .idata | 16896 | cd30ca2b6ff5111155dec94ee29ec186 |
| .tls | 0 | 00000000000000000000000000000000 |
| .rdata | 512 | c1788dfeb92bbf0cff5aeaeaf1270ff8 |
| .reloc | 35840 | e55564594dad16a2ca19fb85903b9300 |
| .rsrc | 17920 | 853bb640d1b3d973758262a49f409cd4 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for qeeeee.exe
