How to remove FramePkg_UPD.exe
- File Details
- Overview
- Analysis
FramePkg_UPD.exe
The module FramePkg_UPD.exe has been detected as Ransom.Wacatac
File Details
Product Name: |
|
Company Name: |
|
MD5: |
36596bddf40315ae6271991657bca567 |
Size: |
6 MB |
First Published: |
2024-12-21 23:00:43 (6 months ago) |
Latest Published: |
2024-12-21 23:00:43 (6 months ago) |
Status: |
Ransom.Wacatac (on last analysis) |
|
Analysis Date: |
2024-12-21 23:00:43 (6 months ago) |
%sysdrive%\$recycle.bin\s-1-5-21-3060579734-2422569493-2513089720-1001\$r2nvyhk |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x000042cc |
Name |
Size of data |
MD5 |
.text |
45056 |
9135bd20f613546cd25773b2d23ac0cc |
.rdata |
12288 |
6087ce743c38d76c0a8063b6b642d638 |
.data |
4096 |
3026954e8f20958c2f1dab34788f759b |
.rsrc |
4096 |
405a2cedd0721a1ad56a6591df9ca2ff |