How to remove 620b08ac18d9f0d61a018ca6d3c1e7c2891d8294faa973dcf6fe0801ca074e24


Md5: bcdda43527c66e8e657b48644b9dfa1e
Sha-256: 620b08ac18d9f0d61a018ca6d3c1e7c2891d8294faa973dcf6fe0801ca074e24
Type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Size: 347 KB
Entropy: 7.87055750246
First published: 2016-11-30 17:21:42 (5 months ago)
Latest published: 2016-11-30 17:21:42 (5 months ago)
Suspicious! Static score: 6 of 13
Digital signature: doesn't exists
Naco: suspicious product or company name.
IAT: suspicious import functions.
Subsystem: WINDOWS_GUI
PE type: pe
OS bitnes: 32
Compilation timestamp: 2014-10-07 07:40:26 (2 years ago)
Image Base: 0x00400000
Entry address: 0x0040322e

PE sections:

Name Size of data Md5
.text 25088 9dca43f07e072b6ab5b47217e8148626
.rdata 5632 0aa2dc336f7337ed3785ee2afeacae36
.data 1536 25a0547494fc1187f1c34d41f766d083
.ndata 0 d41d8cd98f00b204e9800998ecf8427e
.rsrc 26112 37405f116ff53d005692a56185671a41

More information:

Download GridinSoft Anti-Malware - Removal tool for 620b08ac18d9f0d61a018ca6d3c1e7c2891d8294faa973dcf6fe0801ca074e24