Information about PowerShell.exe

PowerShell.exe

File Details

Product Name:

Microsoft® Windows® Operating System
Company Name:

Microsoft Corporation
MD5: 852d67a27e454bd389fa7f02a8cbe23f
Size: 462 KB
First Published: 2019-09-08 17:08:59 (4 years ago)
Latest Published: 2021-12-18 21:31:11 (2 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2021-12-18 21:31:11 (2 years ago)

Common Places:

%system%\windowspowershell
%system%\windowspowershell
%system%\windowspowershell
%system%\windowspowershell
%system%\windowspowershell
%system%\windowspowershell
%system%\windowspowershell
%system%\windowspowershell
%system%\windowspowershell
%system%\windowspowershell

Geography:

19.2%
15.4%
15.4%
11.5%
7.7%
7.7%
3.8%
3.8%
3.8%
3.8%
3.8%
3.8%

OS Version:

Windows 7 65.4%
Windows Server 2008 R2 34.6%

Analysis

Subsystem: Windows CUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000140000000
Entry Address: 0x0000c63c

PE Sections:

Name Size of data MD5
.text 56320 709e12603e8af732d7b463e7a63f9e2f
.data 1536 7658c9a14de711a9b11419fb2eea712c
.pdata 1536 b18a6aa7d53649946eb3eb488fbdabf2
.rsrc 410112 9a47a824eacb74bc437f094c7917d6dd
.reloc 3072 096228363e44a0a67947e364f6737e0f

More information:

Search on Virustotal
copyright for information about PowerShell.exe