How to remove BrStMonW.exe
- File Details
- Overview
- Analysis
BrStMonW.exe
The module BrStMonW.exe has been detected as Ransom.Wacatac
File Details
Product Name: |
|
Company Name: |
|
MD5: |
63e9c23a386fffa84b5e03bff9b628f0 |
Size: |
2 MB |
First Published: |
2022-03-20 23:02:05 (3 years ago) |
Latest Published: |
2023-09-30 23:27:50 (2 years ago) |
Status: |
Ransom.Wacatac (on last analysis) |
|
Analysis Date: |
2023-09-30 23:27:50 (2 years ago) |
%programfiles%\browny02 |
%programfiles%\browny02 |
%programfiles%\browny02 |
%programfiles%\browny02 |
%programfiles%\browny02 |
%programfiles%\browny02 |
%programfiles%\browny02 |
%programfiles%\browny02 |
%programfiles%\browny02 |
%programfiles%\browny02 |
|
25.0% |
|
|
16.7% |
|
|
11.1% |
|
|
8.3% |
|
|
5.6% |
|
|
5.6% |
|
|
5.6% |
|
|
2.8% |
|
|
2.8% |
|
|
2.8% |
|
|
2.8% |
|
|
2.8% |
|
|
2.8% |
|
|
2.8% |
|
|
2.8% |
|
Windows 10 |
70.3% |
|
Windows 7 |
27.0% |
|
Windows 8.1 |
2.7% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00063ae0 |
Name |
Size of data |
MD5 |
.text |
548864 |
ac0863fa1a4a3c2052f50404199a9a77 |
.rdata |
122880 |
eb93fba2265caba34871f3a47bb47761 |
.data |
12288 |
0b971d4ef84161302db6d52c97636337 |
.rsrc |
2387968 |
a1844df3ebc96e145e34fde2511fcd4c |