How to remove registration.exe
- File Details
- Overview
- Analysis
registration.exe
The module registration.exe has been detected as General Threat
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
50b34687eaba00c1a0b98849033096a5 |
| Size: |
308 KB |
| First Published: |
2020-11-10 03:49:32 (3 years ago) |
| Latest Published: |
2020-11-13 09:40:58 (3 years ago) |
| Status: |
General Threat (on last analysis) |
|
| Analysis Date: |
2020-11-13 09:40:58 (3 years ago) |
| %programfiles%\corel\corel graphics 11 |
| %profile%\downloads\compressed\corel draw 11_2\corel draw 11\program files\corel\corel graphics 11 |
| %sysdrive%\system volume information\systemrestore\frstaging\$recycle.bin\s-1-5-21-4185972649-2726390943-2049584857-1001\$rfoq6zz\corel 11 full original version\corel draw 11\program files\corel\corel graphics 11 |
| %programfiles%\corel graphics 11 |
| %sysdrive%\system volume information\systemrestore\frstaging\users\sara\appdata\local\temp\rar$exa2000.41717\corel 11 full original version\corel draw 11\program files\corel\corel graphics 11 |
| Windows 8.1 |
60.0% |
|
| Windows 7 |
40.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000112b1 |
| Name |
Size of data |
MD5 |
| .text |
208896 |
4925f0bf77405f3ba00c91d5ad008b72 |
| .rdata |
49152 |
7d0bc684322c3d419133b081e8df9a79 |
| .data |
20480 |
94af7467bd107126d91ac6588cf3991f |
| .rsrc |
32768 |
6c299f08276621eae0c955c0f8679a17 |
