How to remove install_player.exe

install_player.exe

The module install_player.exe has been detected as Ransom.Wacatac

install_player.exe
Product Name:

QPlayer

Company Name:

N/A

MD5: ccfceeb525e1e3a0fbb6fef9e44814ef
Size: 4 MB
First Published: 2024-05-30 23:02:11 (a year ago)
Latest Published: 2024-05-30 23:02:11 (a year ago)
Status: Ransom.Wacatac (on last analysis)
Analysis Date: 2024-05-30 23:02:11 (a year ago)
%sysdrive%\documenti\desktop\cartelle lavoro\documents\videosorveglianza capannone
%sysdrive%\olddocumenti\desktop\cartelle lavoro\documents\videosorveglianza capannone
%sysdrive%\copia\documents\videosorveglianza capannone
100.0%
Windows 8.1 100.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00008947

PE Sections:

Name Size of data MD5
.text 73728 e169cd9727498334799ce574858324b5
.rdata 8192 1d22aa58107cdb479897ec936f8bbe61
.data 8192 7e0cfc2e100727b4ae39786ac23b9520
.rsrc 184320 8fde89007977380cd0e3b0f051a3ac9c

More information:

Download GridinSoft Anti-Malware - Removal tool for install_player.exe