How to remove A0003414.exe
- File Details
- Overview
- Analysis
A0003414.exe
The module A0003414.exe has been detected as Ransom.Exp
File Details
Product Name: |
|
Company Name: |
|
MD5: |
267d0c02aebc79d0e5eb8d171e43c97f |
Size: |
76 KB |
First Published: |
2020-12-26 16:14:46 (4 years ago) |
Latest Published: |
2020-12-26 16:14:46 (4 years ago) |
Status: |
Ransom.Exp (on last analysis) |
|
Analysis Date: |
2020-12-26 16:14:46 (4 years ago) |
%sysdrive%\system volume information\_restore{3daca153-a9f6-43bf-9b1d-ead34ae9a684} |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x000015d8 |
Name |
Size of data |
MD5 |
.text |
24576 |
d92c9188e7b45cc47e266365a6c14c53 |
.rdata |
8192 |
02afcd46d6559f53c3cdb8acc01b7691 |
.data |
4096 |
0a155f57c13c65d118be91047b8ec77a |
.rsrc |
36864 |
366e16755bd8458420baf934b32aae0e |