How to remove skiper[1].exe
- File Details
- Overview
- Analysis
skiper[1].exe
The module skiper[1].exe has been detected as Ransom.Wacatac
File Details
Product Name: |
|
Company Name: |
|
MD5: |
190073e30039a847af069050ed6e937f |
Size: |
1 MB |
First Published: |
2021-01-05 04:35:55 (4 years ago) |
Latest Published: |
2021-01-05 04:42:36 (4 years ago) |
Status: |
Ransom.Wacatac (on last analysis) |
|
Analysis Date: |
2021-01-05 04:42:36 (4 years ago) |
Overview
Signed By: |
DataNumen, Inc. |
Status: |
Invalid (digital signature could be stolen or file could be patched) |
%localappdata%\microsoft\windows\inetcache\ie |
%temp% |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00006897 |
Name |
Size of data |
MD5 |
.text |
24576 |
0e5b7c4ec989bb777c6fbf0a1cd84794 |
.data |
1024 |
27b3fb2f9d6a275356ae6b7aafacc75e |
.idata |
4608 |
b1ebf4cc039d0487028fa3142ea98061 |
.rsrc |
1005568 |
2a03303eeef97590002ba8953d7f26d3 |
.reloc |
3072 |
39c45ed74aa4b48de090fbb3b1d93bbb |