How to remove konboot_usb.exe
- File Details
- Overview
- Analysis
konboot_usb.exe
The module konboot_usb.exe has been detected as Ransom.Gandcrab
File Details
| MD5: |
eb9e6531d9eacdbe5474da9d6b73d99e |
| Size: |
54 KB |
| First Published: |
2017-05-30 20:03:21 (8 years ago) |
| Latest Published: |
2021-09-13 20:15:30 (3 years ago) |
| Status: |
Ransom.Gandcrab (on last analysis) |
|
| Analysis Date: |
2021-09-13 20:15:30 (3 years ago) |
| %desktop%\tools\glemt passord kon boot v2.1\kon-bootusb |
| %desktop%\kon-bootusb |
| %sysdrive%\wszystkoinne\koonboot |
| %desktop%\desktop\7 reasons your pbn sucks\hackpack v2\hackpack\misc\kon boot os.rar\kon boot\kon boot |
| %sysdrive%\softs\pass remover\konboot_2.0.rar\konboot_2.0 |
| %sysdrive%\softs\pass remover\konboot_2.0\konboot_2.0 |
| %sysdrive%\@ downloads storage\@ downloads storage\kon-bootv2.4 |
| %sysdrive%\2tb\@ downloads storage\@ downloads storage\kon-bootv2.4(1).exe\kon-bootv2.4 |
| %sysdrive%\2tb\@ downloads storage\@ downloads storage\kon-bootv2.4.exe\kon-bootv2.4 |
| %sysdrive%\2tb\@ downloads storage\@ downloads storage\kon-bootv2.4 |
| Belgium |
16.5% |
|
| India |
12.2% |
|
| United States |
7.8% |
|
| Poland |
7.0% |
|
| Italy |
6.1% |
|
| France |
3.5% |
|
| Canada |
3.5% |
|
| Vietnam |
3.5% |
|
| Russia |
3.5% |
|
| United Kingdom |
3.5% |
|
| Mauritania |
2.6% |
|
| Argentina |
2.6% |
|
| Senegal |
1.7% |
|
| Egypt |
1.7% |
|
| Brazil |
1.7% |
|
| Tunisia |
1.7% |
|
| Costa Rica |
1.7% |
|
| Peru |
1.7% |
|
| Spain |
1.7% |
|
| Morocco |
1.7% |
|
| Indonesia |
1.7% |
|
| Norway |
0.9% |
|
| Germany |
0.9% |
|
| Ukraine |
0.9% |
|
| Czech Republic |
0.9% |
|
| Hong Kong |
0.9% |
|
| Myanmar |
0.9% |
|
| Algeria |
0.9% |
|
| Saudi Arabia |
0.9% |
|
| Taiwan |
0.9% |
|
| Pakistan |
0.9% |
|
| Kazakhstan |
0.9% |
|
| Malaysia |
0.9% |
|
| Nepal |
0.9% |
|
| Romania |
0.9% |
|
| Windows 10 |
74.4% |
|
| Windows 7 |
19.7% |
|
| Windows 8.1 |
4.3% |
|
| Windows XP |
1.7% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000014fa |
| Name |
Size of data |
MD5 |
| .text |
36352 |
0ab455eaee7922a06034c062384e2910 |
| .rdata |
9728 |
b3cda9c378c023dd6a8bc4b99eefb258 |
| .data |
4096 |
688faaf70888156a2ac75e27f51cd722 |
| .rsrc |
512 |
27a705a02aee3351e851d9a3f4e2749a |
| .reloc |
4096 |
7165023903747543fd2cfd081eb636ce |
