How to remove RansomwareDefenderSetup.exe
- File Details
- Overview
- Analysis
RansomwareDefenderSetup.exe
The module RansomwareDefenderSetup.exe has been detected as Trojan.Agent
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
76eb556c379ef9cb2a2930da9ddad5c6 |
| Size: |
8 MB |
| First Published: |
2018-08-03 14:09:16 (5 years ago) |
| Latest Published: |
2018-08-07 07:08:15 (5 years ago) |
| Status: |
Trojan.Agent (on last analysis) |
|
| Analysis Date: |
2018-08-07 07:08:15 (5 years ago) |
Overview
| %sysdrive%\ransomware defender pro 3.8.6 |
| %sysdrive%\ransomware defender pro 3.8.6\ransomwaredefender386.rar |
| %desktop% |
| %profile%\downloads |
| %temp% |
| %sysdrive%\$recycle.bin\s-1-5-21-3989639203-1881928156-4038534522-1001\$rinq1ho.6 |
| %sysdrive%\$recycle.bin\s-1-5-21-3989639203-1881928156-4038534522-1001 |
| %profile%\downloads\compressed\ransomware.defender.3.8.6 |
|
25.0% |
|
|
25.0% |
|
|
25.0% |
|
|
12.5% |
|
|
12.5% |
|
| Windows 7 |
50.0% |
|
| Windows 10 |
50.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000da6b1 |
| Name |
Size of data |
MD5 |
| .text |
1198592 |
95eea8f3834322b4070fb846d708dda6 |
| .rdata |
350720 |
4eddf64cefd2fe10ef9685b6bea1ad21 |
| .data |
9216 |
b3c4923d65cab09e4ec861e2d2161e40 |
| .rsrc |
152064 |
bb1c46964c6dcecbb7254d52d8b18523 |
| .reloc |
87040 |
1f5ae7bc66909218be16d85f76ed057d |
