How to remove QbrM3FtdQUylwjHlMIireHlS.exe
- File Details
- Overview
- Analysis
QbrM3FtdQUylwjHlMIireHlS.exe
The module QbrM3FtdQUylwjHlMIireHlS.exe has been detected as Ransom.STOP
File Details
| Product Name: |
|
| MD5: |
45b8b059f43adb47460522f9a76628ae |
| Size: |
4 MB |
| First Published: |
2024-03-18 23:02:21 (2 years ago) |
| Latest Published: |
2024-03-18 23:02:27 (2 years ago) |
| Status: |
Ransom.STOP (on last analysis) |
|
| Analysis Date: |
2024-03-18 23:02:27 (2 years ago) |
Overview
| %sysdrive%\windows.old\users\ik10\appdata |
| %profile% |
| %sysdrive%\windows.old\users\ik10\appdata |
| %sysdrive%\windows.old\users\ik10\appdata |
| %profile% |
| %sysdrive%\windows.old\users\ik10\appdata |
| %sysdrive%\windows.old\users\ik10\appdata |
| %sysdrive%\windows.old\users\ik10\appdata |
| %profile% |
| %profile% |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00004028 |
| Name |
Size of data |
MD5 |
| .text |
61952 |
2422203d11a28b343943dc7ffd9bbe9a |
| .rdata |
35328 |
2543923bc2789aac111e4c1c26a93c8d |
| .data |
4228608 |
6605be323ea69bb908352b03dfa891d5 |
| .rsrc |
70144 |
7eb73c24b15613d499b0834af6ce6d65 |
