How to remove A0003940.exe
- File Details
- Overview
- Analysis
A0003940.exe
The module A0003940.exe has been detected as Ransom.Exp
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
0fd2839e0734ac6564957c1013856bdf |
| Size: |
284 KB |
| First Published: |
2021-03-03 16:58:21 (4 years ago) |
| Latest Published: |
2021-03-03 16:58:21 (4 years ago) |
| Status: |
Ransom.Exp (on last analysis) |
|
| Analysis Date: |
2021-03-03 16:58:21 (4 years ago) |
| %sysdrive%\system volume information\_restore{ee263b9b-a159-4895-a93e-be815cd458f0} |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00011232 |
| Name |
Size of data |
MD5 |
| .text |
126976 |
76dfa2a3b601c48170a48aa6b3e5cc56 |
| .rdata |
32768 |
87a2fd2ce76bf7067a2cc1ea5b78ee67 |
| .data |
8192 |
20467b7c32fe2f8db6f52e132444b359 |
| .rsrc |
118784 |
660fdd1d0404cb126beefa9d8af5c252 |
| pxlxemb |
0 |
d41d8cd98f00b204e9800998ecf8427e |
