How to remove clean1.exe
clean1.exe
The module clean1.exe has been detected as Ransom.Occamy
File Details
| MD5: | 6fbe881f1d6480e2e15d3ebe0f493d2d |
| Size: | 43 KB |
| First Published: | 2019-10-17 10:05:02 (5 years ago) |
| Latest Published: | 2022-08-21 23:31:45 (2 years ago) |
| Status: | Ransom.Occamy (on last analysis) | |
| Analysis Date: | 2022-08-21 23:31:45 (2 years ago) |
Common Places:
| %sysdrive%\hw\free spoofers\free spoofers |
| %sysdrive%\hw\free spoofers\free spoofers |
| %sysdrive% |
| %sysdrive%\ปลดแบน |
| %desktop%\desktop\new folder (2)\arquivos desnecessarios\simple_unban_pack.rar |
| %desktop%\desktop\lockzz_unban_pack.rar |
| %desktop% |
| %appdata% |
Geography:
| 50.0% | ||
| 25.0% | ||
| 12.5% | ||
| 12.5% |
OS Version:
| Windows 10 | 100.0% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 64 |
| Image Base: | 0x0000000140000000 |
| Entry Address: | 0x000068a4 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 26112 | 42d895c8ff7e5600b39370d449bdb83b |
| .rdata | 13824 | eb5e8dc3572413a0d045f159e39d2828 |
| .data | 512 | 0248967cf87dd4b2ee4444611c7b5775 |
| .pdata | 2048 | 47f1670b14306f52f4b432500d8ebcc2 |
| .rsrc | 512 | f86943f8e8f94b3e5ac85ca72d3d273d |
| .reloc | 512 | 58534083c0a06053a41480bb1195cb3c |
More information:
Download GridinSoft
Anti-Malware - Removal tool for clean1.exe
