How to remove kso (2).dll
- File Details
- Overview
- Analysis
kso (2).dll
The module kso (2).dll has been detected as Ransom.Filecoder
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
f30b25300e08cec990c7463ad9eeb53b |
| Size: |
31 MB |
| First Published: |
2018-06-01 09:08:41 (6 years ago) |
| Latest Published: |
2018-06-02 08:10:16 (6 years ago) |
| Status: |
Ransom.Filecoder (on last analysis) |
|
| Analysis Date: |
2018-06-02 08:10:16 (6 years ago) |
Overview
| %profile%\downloads\temp\wps_office_2016_premium_10.2.0.6051\wpsoffice\app |
| %profile%\downloads\temp |
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x0000100f |
| Name |
Size of data |
MD5 |
| .text |
18016768 |
115f0db0805d4b82840f32193f7eab50 |
| .rdata |
11461120 |
2b3e4d56686b77fc141e211c7c44244d |
| .data |
948736 |
32bd02c7682b1db64241676542df078b |
| .tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
| .syzygy |
1024 |
7a8d5871d62f8a8644cd9a7797bab20e |
| .rsrc |
183808 |
acca9c3f4e5e5b75a0bb0d7db329dc81 |
| .reloc |
2229760 |
13542eda851761568cc83ca05427c80b |
