How to remove Welcome.exe
- File Details
- Overview
- Analysis
Welcome.exe
The module Welcome.exe has been detected as Ransom.STOP
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
2794868865afeb2c17df366f3458c91a |
| Size: |
14 MB |
| First Published: |
2025-11-02 23:01:14 (2 weeks ago) |
| Latest Published: |
2025-11-02 23:01:14 (2 weeks ago) |
| Status: |
Ransom.STOP (on last analysis) |
|
| Analysis Date: |
2025-11-02 23:01:14 (2 weeks ago) |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x002461fb |
| Name |
Size of data |
MD5 |
| .text |
4036096 |
1644930bb4d492e251af09a4fab18a05 |
| .rdata |
875008 |
67b03ef642b1f5241523e51852517b5c |
| .data |
148480 |
46600aa12a759799124515d59b62e456 |
| .rsrc |
1451520 |
26d1bf2002e807615d3646688bf9dec9 |
| .enigma1 |
8761344 |
db27ade7408058d3bc59faec482480f8 |
| .enigma2 |
294912 |
89489a2b2c88312f6e48900cc9b8dd4b |
