How to remove ProtonVPN.exe
- File Details
- Overview
- Analysis
ProtonVPN.exe
The module ProtonVPN.exe has been detected as Ransom.Wacatac
File Details
| Product Name: |
|
| MD5: |
22097502c263611df3815704d4a8b861 |
| Size: |
335 KB |
| First Published: |
2022-04-23 23:30:28 (3 years ago) |
| Latest Published: |
2022-04-23 23:31:58 (3 years ago) |
| Status: |
Ransom.Wacatac (on last analysis) |
|
| Analysis Date: |
2022-04-23 23:31:58 (3 years ago) |
| %programfiles%\vmware thinapp 5.2.8 ru portable rsload.net\thinapp\app\thinapp\captures\protonvpn |
| %programfiles% |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x66200000 |
| Entry Address: |
0x00001448 |
| Name |
Size of data |
MD5 |
| .text |
110080 |
8ae2434268c8615a9632cf4d2c11e125 |
| .rdata |
36352 |
24de73c40fddb774fe8c076a9760ff27 |
| .data |
156672 |
08a4c7709986dcb3b415ad1858abaa43 |
| .rsrc |
36352 |
4f3e2f3cfda6691348f52d612b031ca9 |
