How to remove RemoteClient_64_Package_NonePrescan12.exe
- File Details
- Overview
- Analysis
RemoteClient_64_Package_NonePrescan12.exe
The module RemoteClient_64_Package_NonePrescan12.exe has been detected as Ransom.Exp
File Details
Product Name: |
|
Company Name: |
|
MD5: |
9948541dc0f009495607faa32e206698 |
Size: |
173 MB |
First Published: |
2022-12-25 23:23:51 (2 years ago) |
Latest Published: |
2022-12-25 23:23:51 (2 years ago) |
Status: |
Ransom.Exp (on last analysis) |
|
Analysis Date: |
2022-12-25 23:23:51 (2 years ago) |
%sysdrive%\can yedek\benq\downloads |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00017f4b |
Name |
Size of data |
MD5 |
.text |
196608 |
4faa6b80dbd8b4b01cb6e6cc1aebfd2c |
.rdata |
49152 |
52f5324ba28100b6751e2756f3072386 |
.data |
8192 |
b00f93f2dbbeaa59a9d46a9d6069742d |
.rsrc |
4096 |
a2fcea60d62cc1b3330dcd734560ab25 |
.reloc |
20480 |
f5368727ff31bc914e0fec7b36aa79a0 |