How to remove WinTrackerSP.exe
- File Details
- Overview
- Analysis
WinTrackerSP.exe
The module WinTrackerSP.exe has been detected as Ransom.Sabsik
File Details
| Product Name: |
|
| MD5: |
c509c2b292c0211ebbd3f64b879d180b |
| Size: |
2 MB |
| First Published: |
2023-11-12 23:07:31 (2 weeks ago) |
| Latest Published: |
2023-11-29 23:03:03 (a day ago) |
| Status: |
Ransom.Sabsik (on last analysis) |
|
| Analysis Date: |
2023-11-29 23:03:03 (a day ago) |
| %commonappdata% |
| %commonappdata% |
| %temp% |
| %localappdata% |
| %localappdata% |
| %temp% |
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
| %localappdata% |
|
28.6% |
|
|
12.5% |
|
|
10.7% |
|
|
10.7% |
|
|
8.9% |
|
|
7.1% |
|
|
7.1% |
|
|
7.1% |
|
|
3.6% |
|
|
1.8% |
|
|
1.8% |
|
| Windows 10 |
80.4% |
|
| Windows 7 |
19.6% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0048d0d8 |
| Name |
Size of data |
MD5 |
| |
172032 |
1b6a9988b783fdf707800fde6a33f2e1 |
| |
40960 |
39f215e7781f3b833953df1ccc040d06 |
| |
1536 |
37c7eb6510b4608c17188f9b176e6e45 |
| .rsrc |
58880 |
baefa79b2c7f0bbbc3913ec3863acf82 |
| |
10240 |
68cfb0dffbb8fae032489cd2934af4ff |
| .idata |
512 |
859b6805efe9cf1cf02b267c60dfdd9a |
| .tls |
512 |
f193883a51e97a37eb7d79cb38e0e88d |
| .themida |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .boot |
1873408 |
9bd533dfd763c743bf6490df4902c7c1 |
| .reloc |
16 |
0cbb641f679e86a563527e757b7843a1 |
