How to remove update.exe
update.exe
The module update.exe has been detected as Ransom.Wacatac
File Details
| MD5: | f4a2e15cf60c9b03ca0b4bc35c270494 |
| Size: | 19 MB |
| First Published: | 2024-03-27 23:07:29 (a month ago) |
| Latest Published: | 2024-04-23 23:05:51 (a week ago) |
| Status: | Ransom.Wacatac (on last analysis) | |
| Analysis Date: | 2024-04-23 23:05:51 (a week ago) |
Common Places:
| %sysdrive% |
| %sysdrive% |
| %sysdrive% |
| %sysdrive% |
| %sysdrive% |
| %sysdrive% |
| %sysdrive%\$recycle.bin |
Geography:
| 42.9% | ||
| 14.3% | ||
| 14.3% | ||
| 14.3% | ||
| 14.3% |
OS Version:
| Windows 10 | 100.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x00020600 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 208384 | 5288da6fe046954491f6d7e36dbd93b9 |
| .rdata | 45568 | 5343ffaa34c043a785a015193197a3a7 |
| .data | 4608 | 029158c7af186150865de52086fb6948 |
| .didat | 512 | f699ac0448de7c6eb3a68b92109fb04f |
| .rsrc | 32256 | c8f079b2f31b6dd6be4872e7da0c3e18 |
| .reloc | 9216 | a6d52b30b8f5ff8b6e6cc29824bcaec1 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for update.exe
