How to remove Snetchball.exe
- File Details
- Overview
- Analysis
Snetchball.exe
The module Snetchball.exe has been detected as Ransom.Wacatac
File Details
| Product Name: |
|
| MD5: |
fd27f2981b161fe42d425d4e2dfdbb4a |
| Size: |
3 MB |
| First Published: |
2020-04-25 14:38:10 (4 years ago) |
| Latest Published: |
2020-04-25 14:38:10 (4 years ago) |
| Status: |
Ransom.Wacatac (on last analysis) |
|
| Analysis Date: |
2020-04-25 14:38:10 (4 years ago) |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00333b56 |
| MVID: |
595a7389-2037-4ba5-9f32-91fd66dcf9fd |
| Typelib ID: |
05cb476f-57a3-4c64-9972-c2ba75e5af2c |
| Name |
Size of data |
MD5 |
| .text |
3361792 |
8bbd3ec4b1d16ab96afe951c0985f707 |
| .rsrc |
69120 |
166c552a59d2f2b37ea9d75024373f59 |
| .reloc |
512 |
6b8217cef354bddf980b80160b85879f |
