How to remove 6655457.scr
- File Details
- Overview
- Analysis
6655457.scr
The module 6655457.scr has been detected as Ransom.Sabsik
File Details
Product Name: |
|
Company Name: |
|
MD5: |
b07b68a1dc81b05ce026f43e01218ff0 |
Size: |
2 MB |
First Published: |
2021-10-14 20:19:20 (3 years ago) |
Latest Published: |
2021-11-27 21:52:09 (3 years ago) |
Status: |
Ransom.Sabsik (on last analysis) |
|
Analysis Date: |
2021-11-27 21:52:09 (3 years ago) |
Overview
Signed By: |
deepinstruction OÜ |
Status: |
Invalid (digital signature could be stolen or file could be patched) |
%appdata% |
%appdata% |
%appdata% |
%appdata% |
%appdata% |
%appdata% |
%commonappdata% |
%appdata% |
%appdata% |
%appdata% |
|
36.4% |
|
|
27.3% |
|
|
18.2% |
|
|
9.1% |
|
|
9.1% |
|
Analysis
Subsystem: |
Windows CUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x0036a880 |
Name |
Size of data |
MD5 |
|
107520 |
d683c8759e03b6a1d4551206e47d42ce |
|
4608 |
a1a04639d8553c180f0fc9382500c05a |
|
512 |
4f1d9aeabfac7f6bd21917f8fe579d32 |
.idata |
512 |
5e3d042da0f63ca41ef6dfa9a95a07a3 |
ê™°ê™°ê™ |
4608 |
b6381d7ba9d82f9ae9767303537db01e |
.themida |
0 |
d41d8cd98f00b204e9800998ecf8427e |
.boot |
1762304 |
095e6137a4586c7e5dc0b33cf3276317 |
ê™°ê™°ê™ |
3584 |
eea51b642448b73318ae35755bf4d78d |
ê™°ê™°ê™ |
3584 |
6cdd2c9912a278a0600d1ec9796f3059 |
.rsrc |
1081856 |
446c8dc9a284f7d888404b3f6d8073ed |