How to remove RansomwareDefender.exe
- File Details
- Overview
- Analysis
RansomwareDefender.exe
The module RansomwareDefender.exe has been detected as PUP.ShieldApps
File Details
Product Name: |
|
Company Name: |
|
MD5: |
d0b59ae809471b96309a898a6cac91f2 |
Size: |
2 MB |
First Published: |
2020-10-26 03:38:59 (4 years ago) |
Latest Published: |
2025-08-29 23:00:47 (a week ago) |
Status: |
PUP.ShieldApps (on last analysis) |
|
Analysis Date: |
2025-08-29 23:00:47 (a week ago) |
Overview
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
%appdata%\avinstall ransomware defender\shieldapps\ransomware defender 4.2.3\install |
%programfiles% |
|
25.0% |
|
|
12.5% |
|
|
12.5% |
|
|
8.3% |
|
|
8.3% |
|
|
8.3% |
|
|
8.3% |
|
|
8.3% |
|
|
4.2% |
|
|
4.2% |
|
Windows 10 |
75.0% |
|
Windows 7 |
12.5% |
|
Windows 8 |
12.5% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x002346b6 |
MVID: |
ee469fb9-f590-4084-a029-b10e4552b5b9 |
Typelib ID: |
c1ba02b1-e718-4e2b-84e8-e2e4193c4420 |
Name |
Size of data |
MD5 |
.text |
2304000 |
dcc496ce8cd13908ad040369a96d94db |
.reloc |
512 |
30d13130db3bfc43751ec2767c56d882 |
.rsrc |
104448 |
38a1bec1be55690320b35b0d83d10347 |