How to remove warnh.exe

warnh.exe

The module warnh.exe has been detected as Ransom.Presenoker

warnh.exe
MD5: 9f58646de59fd2098b2c8462ef93b445
Size: 893 KB
First Published: 2019-03-15 02:57:20 (5 years ago)
Latest Published: 2024-04-02 23:05:35 (2 weeks ago)
Status: Ransom.Presenoker (on last analysis)
Analysis Date: 2024-04-02 23:05:35 (2 weeks ago)
%windir%
%windir%
%windir%
%windir%
%windir%
%windir%
%windir%
%windir%
%windir%
%windir%
15.9%
11.1%
6.3%
4.8%
4.8%
4.0%
4.0%
3.2%
2.4%
2.4%
2.4%
2.4%
2.4%
1.6%
1.6%
1.6%
1.6%
1.6%
1.6%
1.6%
1.6%
1.6%
1.6%
1.6%
0.8%
0.8%
0.8%
0.8%
0.8%
0.8%
0.8%
0.8%
0.8%
0.8%
0.8%
0.8%
0.8%
0.8%
0.8%
0.8%
0.8%
0.8%
0.8%
0.8%
0.8%
Windows 10 99.3%
Windows 7 0.7%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000902d3

PE Sections:

Name Size of data MD5
.text 642560 ed222528c0af141da47ff8a47c345c52
.rdata 144384 25f8d7882fc2a14d37f5ce858ebb9321
.data 12800 ace5eafa538405645cda58c972af5d6c
.rsrc 113664 37e7dd9ae33cd5a977821a31173847c8

More information:

Download GridinSoft Anti-Malware - Removal tool for warnh.exe