How to remove poobserver.exe
- File Details
- Overview
- Analysis
poobserver.exe
The module poobserver.exe has been detected as Risk.Downloader
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
732685bfda0143b46a44d74261215ed2 |
| Size: |
441 KB |
| First Published: |
2025-07-09 23:00:43 (5 months ago) |
| Latest Published: |
2025-07-30 23:03:17 (5 months ago) |
| Status: |
Risk.Downloader (on last analysis) |
|
| Analysis Date: |
2025-07-30 23:03:17 (5 months ago) |
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x00028b64 |
| Name |
Size of data |
MD5 |
| .text |
327680 |
cf1cc2da29d2cce85baaa457ae0cb445 |
| .rdata |
95744 |
b7cdbf785072104d83547c49fce02d66 |
| .data |
8192 |
466b38a2f9fb898d2202c3e1254e8c53 |
| .pdata |
14336 |
1796f3a49aec956e2197828a5a511d56 |
| _RDATA |
512 |
eafbc0e94d63e40758138a5a2d932d90 |
| .rsrc |
1536 |
561dee51fa735771b4fa5e9841904658 |
| .reloc |
3072 |
2f92bf71df60595aef87ce246ae23440 |