How to remove file[1].exe
- File Details
- Overview
- Analysis
file[1].exe
The module file[1].exe has been detected as Ransom.Gandcrab
File Details
| Company Name: |
|
| MD5: |
d0e8e888cbd04e817460c9e26d8d0b39 |
| Size: |
475 KB |
| First Published: |
2021-01-05 16:53:45 (4 years ago) |
| Latest Published: |
2021-01-11 21:11:47 (4 years ago) |
| Status: |
Ransom.Gandcrab (on last analysis) |
|
| Analysis Date: |
2021-01-11 21:11:47 (4 years ago) |
| %localappdata%\microsoft\windows\inetcache\ie |
| %localappdata%\microsoft\windows\inetcache\ie |
| %appdata% |
| %localappdata%\microsoft\windows\inetcache\ie |
| %appdata% |
| %appdata% |
| %localappdata%\microsoft\windows\temporary internet files\content.ie5 |
| %appdata% |
| %appdata% |
| %appdata% |
| Windows 10 |
91.7% |
|
| Windows 7 |
8.3% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000419a4 |
| Name |
Size of data |
MD5 |
| .text |
321536 |
a77de8b7d767e73592a5cbc0696f22ff |
| .rdata |
30208 |
c5739c584c06133daf5b7b7717289f38 |
| .data |
6144 |
70f29f1753c8d8554a60b4521ad6c2fd |
| .rsrc |
80384 |
f2f862776b8a4f8489f9b1adef83be67 |
| .reloc |
47616 |
a83769955d28efa271f51e8ec8202216 |