How to remove partition_recovery.exe
- File Details
- Overview
- Analysis
partition_recovery.exe
The module partition_recovery.exe has been detected as Adware.InstallCore
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
2adf3b167b3c1feb31ca3252e2d5fc3a |
| Size: |
17 MB |
| First Published: |
2018-09-01 13:10:18 (6 years ago) |
| Latest Published: |
2019-10-17 09:10:01 (5 years ago) |
| Status: |
Adware.InstallCore (on last analysis) |
|
| Analysis Date: |
2019-10-17 09:10:01 (5 years ago) |
Overview
| %desktop% |
| %sysdrive% |
| %profile% |
| %profile%\downloads\giveaways\utility software\data recovery |
| %sysdrive%\chip 2016-17\chip_09_2016\software\magazine\magazine.zip |
| %sysdrive%\pemdriver |
| %sysdrive%\programas.gral.en.d.w7\prog.de reparacion |
| %sysdrive% |
| %sysdrive%\hard drive utilities |
| %sysdrive%\hdd tools |
|
26.3% |
|
|
10.5% |
|
|
10.5% |
|
|
10.5% |
|
|
10.5% |
|
|
10.5% |
|
|
5.3% |
|
|
5.3% |
|
|
5.3% |
|
|
5.3% |
|
| Windows 10 |
73.7% |
|
| Windows 7 |
26.3% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0000f3bc |
| Name |
Size of data |
MD5 |
| .text |
57344 |
e7258ec5a7a1b8a2b6315ab87ca3921c |
| .itext |
3072 |
31d2c0992c2104514a2e4d29f1b0aa33 |
| .data |
3584 |
969ccd0368074bb66069f6791321a500 |
| .bss |
0 |
00000000000000000000000000000000 |
| .idata |
3584 |
94012dc57e6c954757bdae044cba54a4 |
| .tls |
0 |
00000000000000000000000000000000 |
| .rdata |
512 |
8e2aa0e7a135122ada33304886872a4a |
| .rsrc |
413184 |
765e4874598cd0e65babf44562142dd2 |
