How to remove 6655457.scr
- File Details
- Overview
- Analysis
6655457.scr
The module 6655457.scr has been detected as Ransom.Sabsik
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
b07b68a1dc81b05ce026f43e01218ff0 |
| Size: |
2 MB |
| First Published: |
2021-10-14 20:19:20 (4 years ago) |
| Latest Published: |
2021-11-27 21:52:09 (3 years ago) |
| Status: |
Ransom.Sabsik (on last analysis) |
|
| Analysis Date: |
2021-11-27 21:52:09 (3 years ago) |
Overview
| Signed By: |
deepinstruction OÜ |
| Status: |
Invalid (digital signature could be stolen or file could be patched) |
| %appdata% |
| %appdata% |
| %appdata% |
| %appdata% |
| %appdata% |
| %appdata% |
| %commonappdata% |
| %appdata% |
| %appdata% |
| %appdata% |
|
36.4% |
|
|
27.3% |
|
|
18.2% |
|
|
9.1% |
|
|
9.1% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0036a880 |
| Name |
Size of data |
MD5 |
| |
107520 |
d683c8759e03b6a1d4551206e47d42ce |
| |
4608 |
a1a04639d8553c180f0fc9382500c05a |
| |
512 |
4f1d9aeabfac7f6bd21917f8fe579d32 |
| .idata |
512 |
5e3d042da0f63ca41ef6dfa9a95a07a3 |
| ê™°ê™°ê™ |
4608 |
b6381d7ba9d82f9ae9767303537db01e |
| .themida |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .boot |
1762304 |
095e6137a4586c7e5dc0b33cf3276317 |
| ê™°ê™°ê™ |
3584 |
eea51b642448b73318ae35755bf4d78d |
| ê™°ê™°ê™ |
3584 |
6cdd2c9912a278a0600d1ec9796f3059 |
| .rsrc |
1081856 |
446c8dc9a284f7d888404b3f6d8073ed |