How to remove build2.exe
build2.exe
The module build2.exe has been detected as Ransom.Wacatac
File Details
| Product Name: | Circuzar |
| MD5: | 47704f454af8641dac1af2e2768d7881 |
| Size: | 295 KB |
| First Published: | 2024-03-15 23:00:56 (2 years ago) |
| Latest Published: | 2024-06-22 23:06:25 (a year ago) |
| Status: | Ransom.Wacatac (on last analysis) | |
| Analysis Date: | 2024-06-22 23:06:25 (a year ago) |
Common Places:
| %localappdata% |
| %localappdata% |
| %localappdata% |
| %localappdata% |
| %localappdata% |
| %localappdata% |
| %localappdata% |
| %localappdata% |
| %sysdrive%\windows.old\users\zeyne\appdata\local |
| %localappdata% |
Geography:
| 40.0% | ||
| 20.0% | ||
| 10.0% | ||
| 10.0% | ||
| 10.0% | ||
| 10.0% |
OS Version:
| Windows 10 | 90.0% | |
| Windows 7 | 10.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x00009970 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 83456 | 9279aceaee1aa001a5144f82e90babe6 |
| .data | 178176 | 7623567297fce68dd8a46864aedf1237 |
| .idata | 3072 | f691be007bc10039ff585c769a324783 |
| .gif | 1024 | 0f343b0931126a20f133d67c2b018a3b |
| .ralowas | 6656 | 3c63825015aabd810674f44afac6d12b |
| .parazo | 1024 | 0f343b0931126a20f133d67c2b018a3b |
| .rsrc | 27648 | d31cfaf8cbc56b6e92c021635459a164 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for build2.exe
