How to remove Recover Keys.exe
- File Details
- Overview
- Analysis
Recover Keys.exe
The module Recover Keys.exe has been detected as Trojan.Gen
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
0c09516f578827cff52d8a154a6fb598 |
| Size: |
26 MB |
| First Published: |
2017-06-13 17:12:03 (7 years ago) |
| Latest Published: |
2018-10-21 16:21:59 (6 years ago) |
| Status: |
Trojan.Gen (on last analysis) |
|
| Analysis Date: |
2018-10-21 16:21:59 (6 years ago) |
| %profile%\downloads\nuclear coffee recover keys 9.0.3.168 enterprise.portable.sanet.me.rar |
| %sysdrive%\download\pdf\portable\portable nuclear coffee recover keys 9.0.3.168 enterprise\c-903168ncrke.rar |
| %sysdrive%\download\pdf\portable\portable nuclear coffee recover keys 9.0.3.168 enterprise |
| %profile%\downloads\c-903168ncrke.rar |
| %sysdrive%\portableapps |
| %sysdrive%\documentele mele\downloads\nuclear_coffee_recover_keys_9.0.3.168_ent_portable.rar |
| %sysdrive% |
|
22.2% |
|
|
22.2% |
|
|
22.2% |
|
|
22.2% |
|
|
11.1% |
|
| Windows 10 |
77.8% |
|
| Windows 7 |
22.2% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000c9f34 |
| Name |
Size of data |
MD5 |
| CODE |
134656 |
734c38b6245715a6da0a635b663ec78e |
| .text |
870912 |
faf74ae299d3a195a9ed3562964ac100 |
| .rdata |
275968 |
b6b9bc5c390a8349a9e04d754cd19c98 |
| .data |
15872 |
2b9a968829c53ad91b8f76914a01fea2 |
| DATA |
5632 |
23d0a4ff255a2c867a1ed6d1015db10f |
| BSS |
2048 |
c99a74c555371a433d121f551d6c6398 |
| .rsrc |
760320 |
dc471e4fc22317d24b49ccba4af1d2c5 |
