How to remove Language Restore.exe
- File Details
- Overview
- Analysis
Language Restore.exe
The module Language Restore.exe has been detected as Trojan.Startpage
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
81b181ed3540cf6ef59f3cdfa1369f36 |
| Size: |
17 KB |
| First Published: |
2017-05-22 04:02:11 (6 years ago) |
| Latest Published: |
2020-02-25 17:21:42 (4 years ago) |
| Status: |
Trojan.Startpage (on last analysis) |
|
| Analysis Date: |
2020-02-25 17:21:42 (4 years ago) |
| %sysdrive%\backup mam |
| %sysdrive%\จากไดร์ ปี 60\software |
| %sysdrive%\software |
| %sysdrive%\mix programs\add thai language.rar\add thai language up by johnlawxx |
| %sysdrive%\boy\programe |
| %sysdrive%\boy\programe\add thai language.rar |
| %sysdrive%\1\add thai language up by johnlawxx.rar\add thai language up by johnlawxx |
| %sysdrive%\destop\new folder (6) |
| %sysdrive%\destop\add.thai.hercules.rar |
| %sysdrive%\?????1\???????????????\c\compressed\add thai language.rar |
| Windows 10 |
50.0% |
|
| Windows 7 |
50.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0000ca80 |
| Name |
Size of data |
MD5 |
| UPX0 |
0 |
00000000000000000000000000000000 |
| UPX1 |
11264 |
5d11025368c5ee6306a22bdd438bc32e |
| .rsrc |
5632 |
6c1df9fd9f514c663ab6c6445bda81b8 |
