How to remove DYbALA.exe
DYbALA.exe
The module DYbALA.exe has been detected as Ransom.Wacatac
File Details
| Product Name: | FS__DV81ccBp7dp75ekKXit4 |
| Company Name: | FS__DV81ccBp7dp75ekKXit4 |
| MD5: | c47ca4fe99a05c3d470e3727c0956f31 |
| Size: | 642 KB |
| First Published: | 2021-11-06 21:10:28 (3 years ago) |
| Latest Published: | 2021-11-07 21:45:35 (3 years ago) |
| Status: | Ransom.Wacatac (on last analysis) | |
| Analysis Date: | 2021-11-07 21:45:35 (3 years ago) |
Common Places:
| %temp% |
| %temp% |
Geography:
| Hungary | 66.7% | |
| Iran | 33.3% |
OS Version:
| Windows 10 | 100.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x0004691e |
.NET Info:
| MVID: | 45268ddc-d0bb-4900-bdb6-f34d518a2b4f |
PE Sections:
| Name | Size of data | MD5 |
| .text | 281088 | 16cc7466f6f9213a7995bf194346ef6b |
| .rsrc | 375296 | 35443855942ecf0e51e1689e18a0f881 |
| .reloc | 512 | a2df6b354893ec45dcfa06e514168ae0 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for DYbALA.exe
