How to remove rs-recover64.exe
- File Details
- Overview
- Analysis
rs-recover64.exe
The module rs-recover64.exe has been detected as PUP.RemoRecover
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
b47e75f346e838af81810abf50a761b9 |
| Size: |
11 MB |
| First Published: |
2020-06-04 20:27:46 (5 years ago) |
| Latest Published: |
2021-01-11 19:45:45 (5 years ago) |
| Status: |
PUP.RemoRecover (on last analysis) |
|
| Analysis Date: |
2021-01-11 19:45:45 (5 years ago) |
Overview
| %programfiles%\remo recover 5.0 |
| %programfiles%\remo recover 5.0 |
| %programfiles%\remo recover 5.0 |
| %programfiles%\remo recover 5.0 |
| %programfiles%\remo recover 5.0 |
| %programfiles%\remo recover 5.0 |
| %programfiles%\remo recover 5.0 |
| %programfiles%\remo recover 5.0 |
| %programfiles%\remo recover 5.0 |
| %programfiles%\remo recover 5.0 |
|
14.3% |
|
|
14.3% |
|
|
10.7% |
|
|
7.1% |
|
|
7.1% |
|
|
7.1% |
|
|
7.1% |
|
|
7.1% |
|
|
7.1% |
|
|
3.6% |
|
|
3.6% |
|
|
3.6% |
|
|
3.6% |
|
|
3.6% |
|
| Windows 10 |
67.9% |
|
| Windows 7 |
25.0% |
|
| Windows 8.1 |
3.6% |
|
| Windows XP |
3.6% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x00046cd8 |
| Name |
Size of data |
MD5 |
| .text |
2243584 |
30239dafd29f0eaa6f4858a7f017a8c4 |
| .rdata |
855552 |
e6f3369ccd93caef5e4d83447e1fb0fa |
| .data |
22528 |
305be863cff33b245051dec5aa5ea864 |
| .pdata |
97280 |
0c7d3c654155e5284f92a1907bce67cf |
| .rsrc |
8590848 |
8fb3c2402e602fdd8607cb921ea5a194 |
| .reloc |
50176 |
0d750dc2e4b97222b4c9fe5a53185b1f |
