How to remove Microsoft.Windows.DSC.CoreConfProviders.exe
- File Details
- Overview
- Analysis
Microsoft.Windows.DSC.CoreConfProviders.exe
The module Microsoft.Windows.DSC.CoreConfProviders.exe has been detected as Ransom.Sabsik
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
467a0507da69e5346566face76f21d66 |
| Size: |
1 MB |
| First Published: |
2023-03-06 23:17:31 (2 years ago) |
| Latest Published: |
2023-03-06 23:17:31 (2 years ago) |
| Status: |
Ransom.Sabsik (on last analysis) |
|
| Analysis Date: |
2023-03-06 23:17:31 (2 years ago) |
Overview
| Signed By: |
Invincea, Inc. |
| Status: |
Invalid (digital signature could be stolen or file could be patched) |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00176630 |
| Name |
Size of data |
MD5 |
| .text |
1584128 |
cd5e9b88b2e86a49e103370ea61348cb |
| .data |
5120 |
dc62bfec7278fc94252d8becac79c173 |
| .rsrc |
342528 |
f5785c6e58893b8421df4c0e76906953 |
