How to remove SxSExpand.exe

SxSExpand.exe

The module SxSExpand.exe has been detected as Trojan.Downloader

SxSExpand.exe
Remove SxSExpand.exe

File Details

Product Name:

Aunty Mel's Cheap And Nasty SxS File Expander
Company Name:

None
MD5: ca13105c6b1a532b8aeec611ec6459ef
Size: 85 KB
First Published: 2022-10-11 23:12:57 (3 years ago)
Latest Published: 2024-02-25 23:17:15 (2 years ago)
Status: Trojan.Downloader (on last analysis)
Analysis Date: 2024-02-25 23:17:15 (2 years ago)

Common Places:

%sysdrive%\datos usuario taller\descargas
%programfiles%\easeus\easeus partition master\toolkits\easeus os2go\uup
%programfiles%\easeus\easeus partition master\uup
%programfiles%\easeus\easeus partition master\uup
%programfiles%\easeus\easeus partition master\uup
%programfiles%\easeus\easeus partition master\uup
%programfiles%\easeus\easeus partition master\uup
%programfiles%\easeus\easeus partition master\uup
%programfiles%\easeus\easeus partition master\uup
%programfiles%\easeus\easeus partition master\uup

Geography:

30.0%
20.0%
10.0%
10.0%
10.0%
10.0%
10.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows CUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0000cca0

PE Sections:

Name Size of data MD5
CODE 52736 2d1a24ed52862a1293293496e8b032f7
DATA 1536 cfae281b091c96616792e19a6d571d85
BSS 0 d41d8cd98f00b204e9800998ecf8427e
.idata 2560 0d26faf467f62b85081b72fc4e5b940c
.tls 0 d41d8cd98f00b204e9800998ecf8427e
.rdata 512 c5176a96d6d64b2b76893fd89aa48744
.reloc 4096 037b29efe089c2f880985eee8683df83
.rsrc 25088 3bdb3c00fa6ba4c2fa09ab428c2df57c

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for SxSExpand.exe
copyright for information about SxSExpand.exe