How to remove Windows__Update.exe
- File Details
- Overview
- Analysis
Windows__Update.exe
The module Windows__Update.exe has been detected as Ransom.Sabsik
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
d48ca7898fc9a3e904b8880297ce5963 |
| Size: |
336 KB |
| First Published: |
2022-07-19 23:38:43 (2 years ago) |
| Latest Published: |
2022-08-02 23:48:47 (2 years ago) |
| Status: |
Ransom.Sabsik (on last analysis) |
|
| Analysis Date: |
2022-08-02 23:48:47 (2 years ago) |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| Windows 10 |
75.0% |
|
| Windows 7 |
25.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000528ee |
| MVID: |
45616ac2-d1de-4fe5-baac-a23e622a17ba |
| Typelib ID: |
69caff2b-d692-4eff-8b47-1b8c2640d491 |
| Name |
Size of data |
MD5 |
| .text |
330240 |
25bf097677300ea003f671f1438ec9d5 |
| .sdata |
1024 |
d737aebaf4c6388f97e0430096430999 |
| .rsrc |
11776 |
5e179578fa6810a1ab2974d9a66bd5ba |
| .reloc |
512 |
616b30e54120f90d97ddb40bab97fd66 |
