How to remove check_windrvr6.exe
- File Details
- Overview
- Analysis
check_windrvr6.exe
The module check_windrvr6.exe has been detected as Ransom.Exp
File Details
MD5: |
63b515bebf54f1e9701f1f90f8f11883 |
Size: |
109 KB |
First Published: |
2020-02-17 13:33:37 (5 years ago) |
Latest Published: |
2023-04-20 23:15:53 (2 years ago) |
Status: |
Ransom.Exp (on last analysis) |
|
Analysis Date: |
2023-04-20 23:15:53 (2 years ago) |
%sysdrive%\xilinx\vivado\2018.2\data\xicom\cable_drivers\nt64 |
%sysdrive%\xilinx\sdk\2018.2\data\xicom\cable_drivers\nt64 |
%sysdrive%\xilinx\vivado\2019.2\data\xicom\cable_drivers\nt64 |
%sysdrive%\xilinx\vivado\2020.1\data\xicom\cable_drivers\nt64 |
%sysdrive%\xilinx\vivado\2020.1\data\xicom\cable_drivers\nt64 |
%sysdrive%\xilinx\vitis\2020.1\data\xicom\cable_drivers\nt64 |
%sysdrive%\nifpga\programs\vivado2019_1\data\xicom\cable_drivers\nt64 |
%sysdrive%\vivado\2021.1\data\xicom\cable_drivers\nt64 |
%sysdrive%\xilinx\vitis\2022.2\data\xicom\cable_drivers\nt64 |
%sysdrive%\xilinx\vivado\2022.2\data\xicom\cable_drivers\nt64 |
|
20.0% |
|
|
20.0% |
|
|
20.0% |
|
|
10.0% |
|
|
10.0% |
|
|
10.0% |
|
|
10.0% |
|
Windows 10 |
90.0% |
|
Windows 8.1 |
10.0% |
|
Analysis
Subsystem: |
Windows CUI |
PE Type: |
pe |
OS Bitness: |
64 |
Image Base: |
0x0000000140000000 |
Entry Address: |
0x000014d4 |
Name |
Size of data |
MD5 |
.text |
64512 |
50cd5b7a0b1522f499b10e5fc320bda6 |
.rdata |
38912 |
cf5101c95691650f6907d91790bf32f4 |
.data |
2560 |
48e8f3cc2b24e4d6c4320588a467e2d9 |
.pdata |
4096 |
397a162098cb79252404f2eda5ed63a9 |
.gfids |
512 |
93f3bcded3de47ee7ac350a7a8cba322 |
.rsrc |
512 |
259c6a0f3892b3cb46826c9ecfa5e3fd |