Rscap 1 11.exe -

Example simple YARA rule (conceptual):

rule rscap_1_11_exe 
  meta:
    description = "Detects rscap 1 11.exe by string and section entropy"
  strings:
    $s1 = "rscap" nocase
    $s2 = "http://" ascii
  condition:
    ($s1 or $s2) and filesize < 50MB

Use an elevated Command Prompt:

netstat -ano | findstr "Rscap"

Or use TCPView from Microsoft Sysinternals. Watch for connections to foreign IP addresses. Rscap 1 11.exe

The file Rscap 1 11.exe was analyzed to determine its functionality, origin, and potential security risk. Use an elevated Command Prompt: netstat -ano |

Before deleting anything, perform these diagnostics to understand what you are dealing with. Or use TCPView from Microsoft Sysinternals