How to remove warnh.exe
warnh.exe
The module warnh.exe has been detected as Ransom.Presenoker
File Details
| MD5: | 9f58646de59fd2098b2c8462ef93b445 |
| Size: | 893 KB |
| First Published: | 2019-03-15 02:57:20 (6 years ago) |
| Latest Published: | 2024-09-24 23:02:24 (a year ago) |
| Status: | Ransom.Presenoker (on last analysis) | |
| Analysis Date: | 2024-09-24 23:02:24 (a year ago) |
Common Places:
| %windir% |
| %windir% |
| %windir% |
| %windir% |
| %windir% |
| %windir% |
| %windir% |
| %windir% |
| %windir% |
| %windir% |
Geography:
| 15.5% | ||
| 11.6% | ||
| 6.2% | ||
| 4.7% | ||
| 4.7% | ||
| 3.9% | ||
| 3.9% | ||
| 3.1% | ||
| 3.1% | ||
| 2.3% | ||
| 2.3% | ||
| 2.3% | ||
| 2.3% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% | ||
| 0.8% | ||
| 0.8% | ||
| 0.8% | ||
| 0.8% | ||
| 0.8% | ||
| 0.8% | ||
| 0.8% | ||
| 0.8% | ||
| 0.8% | ||
| 0.8% | ||
| 0.8% | ||
| 0.8% | ||
| 0.8% | ||
| 0.8% | ||
| 0.8% | ||
| 0.8% | ||
| 0.8% | ||
| 0.8% | ||
| 0.8% | ||
| 0.8% | ||
| 0.8% | ||
| 0.8% |
OS Version:
| Windows 10 | 99.3% | |
| Windows 7 | 0.7% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x000902d3 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 642560 | ed222528c0af141da47ff8a47c345c52 |
| .rdata | 144384 | 25f8d7882fc2a14d37f5ce858ebb9321 |
| .data | 12800 | ace5eafa538405645cda58c972af5d6c |
| .rsrc | 113664 | 37e7dd9ae33cd5a977821a31173847c8 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for warnh.exe
