How to remove default_bonus[1].exe

default_bonus[1].exe

The module default_bonus[1].exe has been detected as Ransom.STOP

default_bonus[1].exe
Remove default_bonus[1].exe

File Details

Product Name:

Microsoft (R) Visual Studio (R) 2010
Company Name:

Tools.Common Corporation
MD5: 69dba4835f8b0504d40468044cd7e475
Size: 6 MB
First Published: 2024-05-29 23:17:28 (2 years ago)
Latest Published: 2024-05-30 23:01:10 (2 years ago)
Status: Ransom.STOP (on last analysis)
Analysis Date: 2024-05-30 23:01:10 (2 years ago)

Overview

Signed By: IBM USA
Status: Valid

Common Places:

%localappdata%\microsoft\windows\inetcache\ie
%mydoc%

Geography:

50.0%
50.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x004ab320

PE Sections:

Name Size of data MD5
.text 0 d41d8cd98f00b204e9800998ecf8427e
.rdata 0 d41d8cd98f00b204e9800998ecf8427e
.data 0 d41d8cd98f00b204e9800998ecf8427e
.vmp¾° 0 d41d8cd98f00b204e9800998ecf8427e
.vmp¾° 1536 ba156d82ebef7a07b13b08ef4df60815
.vmp¾° 7013376 bae895647ee8941d220f219c1b43cebc
.reloc 2048 db5c31749c1c8887236ff21f6e16efb6
.rsrc 164352 de79bba231435a0ed6065b50619d1542

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for default_bonus[1].exe
copyright for information about default_bonus[1].exe