How to remove YChqoFSb5e7vgMAo1uRubTPa.exe

YChqoFSb5e7vgMAo1uRubTPa.exe

The module YChqoFSb5e7vgMAo1uRubTPa.exe has been detected as Trojan.RisePro

YChqoFSb5e7vgMAo1uRubTPa.exe
Remove YChqoFSb5e7vgMAo1uRu

File Details

MD5: 858bb0a3b4fa6a54586402e3ee117076
Size: 4 MB
First Published: 2024-04-04 23:06:14 (a year ago)
Latest Published: 2024-04-20 23:06:00 (a year ago)
Status: Trojan.RisePro (on last analysis)
Analysis Date: 2024-04-20 23:06:00 (a year ago)

Overview

Signed By: MSI PRO B760-P WIFI DDR4
Status: Valid

Common Places:

%localappdata%
%localappdata%
%localappdata%
%localappdata%
%localappdata%
%localappdata%
%localappdata%
%localappdata%
%localappdata%
%localappdata%

Geography:

Colombia 68.2%
Brazil 17.0%
Indonesia 8.0%
Cameroon 5.7%
Peru 1.1%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000140000000
Entry Address: 0x008fcf78

PE Sections:

Name Size of data MD5
579072 63a7c330907c09cede6bcbd1e885924d
99840 34320f65a7cd4de11844e8a9ff6d4a4d
4096 a58525f7d912c2d960af92cda83c3314
22528 eae07c065e96a16ad69e4ca293fe063f
512 948600ee2a17fae5a005d4c7bf44254f
.rsrc 1608192 5743837adc9d4a61ae159767ebaf9919
3072 340c210f16d5c8138be1034b498c6f9f
.idata 512 a478dc87186427eb486ace4a5c55b9f8
.tls 512 a2c01e1da08814780daf09cd6972064e
.themida 0 d41d8cd98f00b204e9800998ecf8427e
.boot 2149888 a1cf635e1ed40af242bb6d736b617e0c
.reloc 16 25267578666eb36c63b2e9dffe1bbb23

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for YChqoFSb5e7vgMAo1uRubTPa.exe
copyright for information about YChqoFSb5e7vgMAo1uRubTPa.exe
­