How to remove $RP13XOU.exe

$RP13XOU.exe

The module $RP13XOU.exe has been detected as Adware.InstallCore

$RP13XOU.exe
Remove $RP13XOU.exe

File Details

Product Name:

Falco Image Studio

Company Name:

Falco Software, Inc.

MD5: fee970c78ec891979c319ae508cbbfed
Size: 22 MB
First Published: 2018-05-31 18:44:06 (6 years ago)
Latest Published: 2021-08-24 20:58:59 (3 years ago)
Status: Adware.InstallCore (on last analysis)
Analysis Date: 2021-08-24 20:58:59 (3 years ago)

Overview

Signed By: Valeriy Sokolov
Status: Valid

Common Places:

%programfiles%
%sysdrive%\$recycle.bin
%temp%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%

File Names:

FalcoImageStudioSetup.exe
$RP13XOU.exe

Geography:

25.8%
11.7%
5.6%
4.7%
4.2%
4.2%
4.2%
3.3%
3.3%
2.8%
2.3%
2.3%
1.9%
1.9%
1.4%
1.4%
1.4%
1.4%
1.4%
0.9%
0.9%
0.9%
0.9%
0.9%
0.9%
0.9%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%

OS Version:

Windows 10 60.1%
Windows 7 32.1%
Windows 8.1 5.5%
Windows Server 2012 R2 1.4%
Windows XP 0.5%
Windows 8 0.5%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000117dc

PE Sections:

Name Size of data MD5
.text 62464 a33e9ff7181115027d121cd377c28c8f
.itext 4096 caec456c18277b579a94c9508daf36ec
.data 3584 746954890499546d73dce0e994642192
.bss 0 00000000000000000000000000000000
.idata 4096 e9b9c0328fd9628ad4d6ab8283dcb20e
.tls 0 00000000000000000000000000000000
.rdata 512 3dffc444ccc131c9dcee18db49ee6403
.rsrc 44032 d3033390448d070f12c0545552c2ebdf

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $RP13XOU.exe
copyright for information about $RP13XOU.exe