How to remove ac2NS9gVYOeGINTJMpRYXxSh.exe

» File
File Details
Overview
Analysis

ac2NS9gVYOeGINTJMpRYXxSh.exe

The module ac2NS9gVYOeGINTJMpRYXxSh.exe has been detected as Ransom.Wacatac

ac2NS9gVYOeGINTJMpRYXxSh.exe

Remove ac2NS9gVYOeGINTJMpRY

File Details

Main Info:

Product Name:	DSmobileCapture
Company Name:	BROTHER
MD5:	6b13a8ae290d32b179b33c288942d102
Size:	3 MB
First Published:	2023-11-18 23:04:26 (2 years ago)
Latest Published:	2023-11-19 23:04:21 (2 years ago)

Analysis:

Status:	Ransom.Wacatac (on last analysis)
Analysis Date:	2023-11-19 23:04:21 (2 years ago)

Overview

Digital Signature

Signed By:	HDD Toshiba SATA-III 10Tb HDWG460EZSTA N300 (7200rpm) 4096Mb 2.5 Rtl
Status:	Valid

Common Places:

%profile%\pictures

%profile%\pictures

%profile%\pictures

Geography:

	66.7%
	33.3%

OS Version:

Windows 10

100.0%

Analysis

PE Info:

Subsystem:	Windows GUI
PE Type:	pe
OS Bitness:	32
Image Base:	0x00400000
Entry Address:	0x005b32e8

PE Sections:

Name	Size of data	MD5
	71168	07c58102e64cdaf0193f5d98f5bebb4a
	5120	ce63f73cdb209675fe9ec4cd821fa34f
	512	d88cd31c9e0c08d0b6fab119387897ee
.idata	512	e9ee2a1de02f6cd6460a8e1db8dadfbd
.rsrc	2560	bfef5342d18256719b70b3257317512b
.themida	0	d41d8cd98f00b204e9800998ecf8427e
.boot	3178496	03eaf1804db7a314a80028416ec86f23

More information:

Search on Virustotal

Download GridinSoft Anti-Malware - Removal tool for ac2NS9gVYOeGINTJMpRYXxSh.exe

copyright for information about ac2NS9gVYOeGINTJMpRYXxSh.exe