How to remove 254E.tmp.exe
- File Details
- Overview
- Analysis
254E.tmp.exe
The module 254E.tmp.exe has been detected as Ransom.Filecoder
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
93b4b6fbf24f424da0111b2d37844dfb |
| Size: |
95 KB |
| First Published: |
2021-01-10 00:17:47 (4 years ago) |
| Latest Published: |
2021-01-11 20:58:43 (4 years ago) |
| Status: |
Ransom.Filecoder (on last analysis) |
|
| Analysis Date: |
2021-01-11 20:58:43 (4 years ago) |
| %temp% |
| %temp% |
| %temp% |
| %temp% |
| %temp% |
| %temp% |
| %temp% |
| %temp% |
| %temp% |
| %temp% |
|
28.6% |
|
|
21.4% |
|
|
14.3% |
|
|
14.3% |
|
|
7.1% |
|
|
7.1% |
|
|
7.1% |
|
| Windows 10 |
57.1% |
|
| Windows 7 |
42.9% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00003348 |
| Name |
Size of data |
MD5 |
| .text |
26112 |
f6e38befa56abea7a550141c731da779 |
| .rdata |
5120 |
569269e9338b2e8ce268ead1326e2b0b |
| .data |
1536 |
17edd496e40111b5a48947c480fda13c |
| .ndata |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .rsrc |
12288 |
7c60d083727d612c30818459fd1c4750 |
