How to remove C42E.tmp.exe
- File Details
- Overview
- Analysis
C42E.tmp.exe
The module C42E.tmp.exe has been detected as Ransom.Occamy
File Details
Product Name: |
|
Company Name: |
|
MD5: |
efb21d66f03334e1c8c49373f53cc7e5 |
Size: |
611 KB |
First Published: |
2019-06-05 04:28:10 (5 years ago) |
Latest Published: |
2019-06-05 07:16:07 (5 years ago) |
Status: |
Ransom.Occamy (on last analysis) |
|
Analysis Date: |
2019-06-05 07:16:07 (5 years ago) |
Overview
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00023621 |
Name |
Size of data |
MD5 |
.text |
272384 |
5fd3008bcd03db0339ac3d19cc3f55b8 |
.rdata |
110592 |
27851b0ac79b27a75697d510ec222642 |
.data |
10752 |
b6fd0dc8720483200e668e073c27434f |
.text |
6144 |
4d39f567737ee25fcd2ef0339ed6f8e1 |
.tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
.rsrc |
197632 |
9904ff82292971f50e1cf59ff1219326 |
.reloc |
17920 |
6fbcd293afbe6d74c60e49032e08b693 |