How to remove PowerExpertNT.exe
- File Details
- Overview
- Analysis
PowerExpertNT.exe
The module PowerExpertNT.exe has been detected as Trojan.RisePro
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
8ed85982b93adb880090ee53525e9264 |
| Size: |
3 MB |
| First Published: |
2024-02-06 23:04:03 (a year ago) |
| Latest Published: |
2024-06-29 23:02:17 (12 months ago) |
| Status: |
Trojan.RisePro (on last analysis) |
|
| Analysis Date: |
2024-06-29 23:02:17 (12 months ago) |
Overview
| %temp% |
| %commonappdata% |
| %localappdata% |
| %commonappdata% |
| %localappdata% |
| %profile%\onedrive\documentos |
| %profile%\onedrive\documentos |
| %commonappdata% |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x004f6563 |
| Name |
Size of data |
MD5 |
| .text |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .rdata |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .data |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .:¢×ó |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .:¢×ó |
1536 |
90194ceb47bd90e6d0d92301f78782b8 |
| .:¢×ó |
3035136 |
d611fa083656b934da762ce198c1bab5 |
| .reloc |
7168 |
757c795b6e1a52c9246bb0961d06f160 |
| .rsrc |
310784 |
e9dd0ccec7b09014579f9416f25edc7c |
