How to remove rs-recover32.exe
- File Details
- Overview
- Analysis
rs-recover32.exe
The module rs-recover32.exe has been detected as PUP.RemoRecover
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
3e6a5e0fb329122b46d6c07a3212bcc8 |
| Size: |
9 MB |
| First Published: |
2020-05-26 00:20:34 (5 years ago) |
| Latest Published: |
2021-01-11 19:41:01 (5 years ago) |
| Status: |
PUP.RemoRecover (on last analysis) |
|
| Analysis Date: |
2021-01-11 19:41:01 (5 years ago) |
Overview
| %programfiles%\remo recover 5.0 |
| %programfiles%\remo recover 5.0 |
| %programfiles%\remo recover 5.0 |
| %programfiles%\remo recover 5.0 |
| %programfiles%\remo recover 5.0 |
| %programfiles%\remo recover 5.0 |
| %programfiles%\remo recover 5.0 |
| %programfiles%\remo recover 5.0 |
| %programfiles%\remo recover 5.0 |
| %programfiles%\remo recover 5.0 |
|
11.8% |
|
|
11.8% |
|
|
11.8% |
|
|
11.8% |
|
|
11.8% |
|
|
5.9% |
|
|
5.9% |
|
|
5.9% |
|
|
5.9% |
|
|
5.9% |
|
|
5.9% |
|
|
5.9% |
|
| Windows 10 |
64.7% |
|
| Windows 7 |
23.5% |
|
| Windows 8.1 |
5.9% |
|
| Windows XP |
5.9% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000e5014 |
| Name |
Size of data |
MD5 |
| .text |
1270784 |
d1e520ceed1b9959449d0cd29ec03a45 |
| .rdata |
415232 |
cb0488561bf59ed7c6f1a274aa8efe55 |
| .data |
17920 |
f0f98fdf5698bd38dbaac6bb19061430 |
| .rsrc |
8590848 |
f62a01cee9039336b10151e3d6e454dd |
| .reloc |
161792 |
8d135e5854d2d26e3fd352061d06607d |