How to remove A0005770.exe
- File Details
- Overview
- Analysis
A0005770.exe
The module A0005770.exe has been detected as Ransom.Exp
File Details
Product Name: |
|
Company Name: |
|
MD5: |
35da1d55c4730aff8c5ef7a5b0528841 |
Size: |
68 KB |
First Published: |
2020-04-24 09:05:57 (4 years ago) |
Latest Published: |
2020-04-24 09:05:57 (4 years ago) |
Status: |
Ransom.Exp (on last analysis) |
|
Analysis Date: |
2020-04-24 09:05:57 (4 years ago) |
%sysdrive%\system volume information\_restore{a6ffce1a-c34b-4e54-b3bb-99233422b3cd} |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x000015d8 |
Name |
Size of data |
MD5 |
.text |
24576 |
d92c9188e7b45cc47e266365a6c14c53 |
.rdata |
8192 |
02afcd46d6559f53c3cdb8acc01b7691 |
.data |
4096 |
0a155f57c13c65d118be91047b8ec77a |
.rsrc |
28672 |
5149a82fda2e58916891fca92763ef9a |
atkkdlp |
0 |
00000000000000000000000000000000 |