How to remove RegistryLife.exe
- File Details
- Overview
- Analysis
RegistryLife.exe
The module RegistryLife.exe has been detected as PUP.RegistryLife
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
d9527f12f2dcef2c9ecf3992adb3e402 |
| Size: |
24 MB |
| First Published: |
2020-09-14 14:49:37 (5 years ago) |
| Latest Published: |
2024-06-12 23:02:21 (a year ago) |
| Status: |
PUP.RegistryLife (on last analysis) |
|
| Analysis Date: |
2024-06-12 23:02:21 (a year ago) |
Overview
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
|
35.0% |
|
|
10.0% |
|
|
10.0% |
|
|
10.0% |
|
|
10.0% |
|
|
5.0% |
|
|
5.0% |
|
|
5.0% |
|
|
5.0% |
|
|
5.0% |
|
| Windows 10 |
85.0% |
|
| Windows 7 |
15.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000000400000 |
| Entry Address: |
0x000080b0 |
| Name |
Size of data |
MD5 |
| .text |
10172416 |
990b7ede98612bc6c5a18dcf04f1e05f |
| .rodata |
3683328 |
4e8798d6ac17a3dd56d0c55fd70464b3 |
| .data |
1200128 |
0030ae1e66d8bdd587155210ac0363b0 |
| .tls |
2560 |
d9005f478bb254c1daacba4110df65e5 |
| .pdata |
578560 |
b8e5f007e7bf633ce52dd07b21e9e27f |
| .xdata |
1144320 |
1d035ff5bd4adbe6410751dc158a918e |
| .rdata |
512 |
8752b4ce213d40c7f41f52580b4878e8 |
| .idata |
32256 |
1d016f35313c0126d040d52715b64c81 |
| .didata |
7168 |
1eb15b2d76c7a53bf1ecb36aa7d65ffd |
| .edata |
5120 |
a059372d106feab8cabffbc017b1fcfd |
| .rsrc |
3085312 |
b91e0a45c08c041bbb4ecb97ecac3dcd |
| .reloc |
472064 |
e1058406fa6df98ebde2494ee5a1b2a3 |
