How to remove support.exe
- File Details
- Overview
- Analysis
support.exe
The module support.exe has been detected as Ransom.Locky
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
5e5986acff40fbb3e98d7d2a2baaf129 |
| Size: |
1 MB |
| First Published: |
2018-10-12 10:04:25 (6 years ago) |
| Latest Published: |
2020-08-17 18:31:57 (4 years ago) |
| Status: |
Ransom.Locky (on last analysis) |
|
| Analysis Date: |
2020-08-17 18:31:57 (4 years ago) |
| %programfiles% |
| %sysdrive%\!program files (x86) |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| Russia |
30.8% |
|
| Brazil |
15.4% |
|
| Poland |
15.4% |
|
| Germany |
7.7% |
|
| Vietnam |
7.7% |
|
| Belarus |
7.7% |
|
| Thailand |
7.7% |
|
| Turkey |
7.7% |
|
| Windows 10 |
50.0% |
|
| Windows 7 |
33.3% |
|
| Windows XP |
8.3% |
|
| Windows 8.1 |
8.3% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000f5b54 |
| Name |
Size of data |
MD5 |
| CODE |
1002496 |
b99a519349ae09e91d2f5d578600e68e |
| DATA |
17920 |
13c996c3ad735b98a06e2e4a1cc83c65 |
| BSS |
0 |
00000000000000000000000000000000 |
| .idata |
12800 |
dd2c088a4b180763b42f5f1380615c9c |
| .tls |
0 |
00000000000000000000000000000000 |
| .rdata |
512 |
a547ac0cfcc5747dbbd3c0a6c1d29cb3 |
| .reloc |
0 |
00000000000000000000000000000000 |
| .rsrc |
269312 |
14e77f1284ef41b87680640468a45931 |
