How to remove gs-server.exe
- File Details
- Overview
- Analysis
gs-server.exe
The module gs-server.exe has been detected as Ransom.Filecoder
File Details
Product Name: |
|
MD5: |
3ee34583dd675e68814d80fb0a28af0c |
Size: |
7 MB |
First Published: |
2018-10-19 18:19:38 (6 years ago) |
Latest Published: |
2018-12-21 01:40:30 (6 years ago) |
Status: |
Ransom.Filecoder (on last analysis) |
|
Analysis Date: |
2018-12-21 01:40:30 (6 years ago) |
Overview
%programfiles%\siber systems |
%programfiles% |
%programfiles%\siber systems |
|
21.1% |
|
|
15.8% |
|
|
15.8% |
|
|
10.5% |
|
|
10.5% |
|
|
5.3% |
|
|
5.3% |
|
|
5.3% |
|
|
5.3% |
|
|
5.3% |
|
Windows 10 |
73.7% |
|
Windows 7 |
15.8% |
|
Windows 8.1 |
5.3% |
|
Windows Vista |
5.3% |
|
Analysis
Subsystem: |
Windows CUI |
PE Type: |
pe |
OS Bitness: |
64 |
Image Base: |
0x0000000140000000 |
Entry Address: |
0x00274274 |
Name |
Size of data |
MD5 |
.text |
4793344 |
fcfd40c63cb70e387f0522f7849408cf |
.rdata |
2403328 |
763b492768e2fab09a9e9690c31a2045 |
.data |
343552 |
f20d0cab9174c349d3e4f3b39c2d2abc |
.pdata |
182272 |
a0963c012c9e243e5c645fbb25de2065 |
.rsrc |
2048 |
d19d8bd8abbd11dfeb8790207aa50b1e |