How to remove A0020765.exe
- File Details
- Overview
- Analysis
A0020765.exe
The module A0020765.exe has been detected as Ransom.Wacatac
File Details
| MD5: |
35b8a803fdddafb8b7dcbc3508abb862 |
| Size: |
286 KB |
| First Published: |
2018-06-19 17:06:14 (5 years ago) |
| Latest Published: |
2023-11-10 23:03:29 (5 months ago) |
| Status: |
Ransom.Wacatac (on last analysis) |
|
| Analysis Date: |
2023-11-10 23:03:29 (5 months ago) |
| %sysdrive%\malwarebytes premium 3.0.6.1469\mb3-toolbox-2016.rar |
| %desktop%\programas\malwarebytes premium v3.5.1.2522 - multies + keygen\malwarebytes premium v3.5.1.2522 - multies + keygen |
| %profile%\downloads\v3 3 1 2183 multilingual keygen-uret\v3.3.1.2183.multilingual.keygen-uret\malwarebytes.premium.v3.3.1.2183.multilingual.keygen-uret |
| %desktop%\programas\malwarebytes anti-malware\malwarebytes.premium.v3.0.6.1469.multilingual.keygen_by.ingetutospc |
| %sysdrive%\f-drive-4304718 |
| %profile%\downloads\programs\protection utilities\malwares\malwarebytes.premium.v3.3.1.2183.multilingual.keygen-uret |
| %desktop%\downloads\malwarebytes premium v3.2.2.2029-1.0.212-1.0.2951.rar |
| %profile%\downloads\compressed\malwarebytes.premium.v3.3.1.2183.multilingual.keygen-uret\v3.3.1.2183.multilingual.keygen-uret\malwarebytes.premium.v3.3.1.2183.multilingual.keygen-uret |
| %temp%\rar$exa4552.10616 |
| %temp%\rar$exa4552.15756 |
| MB3-ToolBox-2016.exe |
| Patch.exe |
| Patch (MalwareByte).exe |
| A0020765.exe |
|
27.1% |
|
|
24.3% |
|
|
6.0% |
|
|
5.0% |
|
|
4.1% |
|
|
3.7% |
|
|
2.3% |
|
|
2.3% |
|
|
2.3% |
|
|
2.3% |
|
|
1.8% |
|
|
1.8% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
| Windows 10 |
63.1% |
|
| Windows 7 |
30.4% |
|
| Windows 8.1 |
6.0% |
|
| Windows Server 2012 R2 |
0.5% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0000fce7 |
| Name |
Size of data |
MD5 |
| .text |
135168 |
792daf1ebbf0f019d3486580dfe317d1 |
| .rdata |
36864 |
9d62ca750ab21611bd69d7a3e5333d52 |
| .data |
3072 |
ab0f244b352be8b4c7ffac28b0999542 |
| .gfids |
512 |
7af9f45b4511d68a2575fde63622b162 |
| .rsrc |
17920 |
dc22f77ae67a8189115f792a8e7d96a2 |
| .reloc |
9216 |
f61d7f0f6bcc5a445f5126dff171e1c0 |
