CommandLine.dll Malware RisePro Analysis
| Online Virus Checker | v.1.0.173.174 |
| DB Version: | 2024-04-26 21:00:28 |
Malware.Win32.RisePro.tr
| File | CommandLine.dll |
| Checked | 2024-04-26 21:24:08 |
| MD5 | 22bcdfc5882494840b272828fe2267e9 |
| SHA1 | 6f24b49c7e1d9b1d9bc34bccb121584517a1d8d1 |
| SHA256 | 29f973eb617a2d99d19379f7045fb468ae275dcc82e07fbef840483a65c3bc9d |
| SHA512 | 6bbc2f72f580660ca3d350d77e4ee6bd6de8b81f206f34edd5c6fd34cd30367579535078c4480457641c71746c1601bfa167b36e8ad5638cbb27b5703ef0174a |
| Imphash | 46afc61b34fb8e20ac7399f0df86ba31 |
| File Size | 6520400 bytes |
Malware.Win32.RisePro.tr Removal
Gridinsoft has the capability to identify and eliminate Malware.Win32.RisePro.tr without requiring further user intervention.
- Start by downloading Gridinsoft Anti-Malware to your computer.
- Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
- Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
- Click on the "Standard Scan" button.
- After the scanning process is finished, click on "Clean Now" to remove any detected threats.
- If prompted, restart your system to complete the removal process.
File Version Information
| Translation | 0x0000 0x04b0 |
| Comments | Terse syntax C# command line parser for .NET. For FSharp support see CommandLineParser.FSharp. The Command Line Parser Library offers to CLR applications a clean and concise API for manipulating command line arguments and related tasks. |
| CompanyName | gsscoder;nemec;ericnewton76;moh-hassan |
| FileDescription | CommandLine |
| FileVersion | 2.8.0.0 |
| InternalName | CommandLine.dll |
| LegalCopyright | Copyright (c) 2005 - 2020 Giacomo Stelluti Scala & Contributors |
| OriginalFilename | CommandLine.dll |
| ProductName | CommandLine |
| ProductVersion | 2.8.0 |
| Assembly Version | 2.8.0.0 |
Portable Executable Info
 |
62c4ebdd70e58e4b16e6e52278526fe1 1b966b874661dc5a778dbd38dc30ee57 f8f8f8f8f8ccd0f0 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x00fb1136 |
| Compilation: | 2023-12-20 09:49:25 |
| Checksum: | 0x00640e43 (Actual: 0x00640e43) |
| OS Version: | 6.0 |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
| Sign: | An error occurred while validating the countersignature: X.509 Name objects may not contain the replacement character |
| Sections: | 5 |
| Imports: | KERNEL32, USER32, ADVAPI32, SHELL32, ole32, |
| Exports: | 0 |
| Resources: | 6 |
Sections
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x001502df | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .rdata | 0x00152000 | 0x0002b6d6 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .data | 0x0017e000 | 0x00008960 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .reloc | 0x00cc9000 | 0x00001adc | 0x00001c00 | c8864d280bcc63587255a49cd95ab5d7 | 5.81 |
| .rsrc | 0x00ccb000 | 0x00021551 | 0x00021600 | d777126b1570fb4401f01874f35fce4c | 6.42 |
