How to remove wzupdate.exe
- File Details
- Overview
- Analysis
wzupdate.exe
The module wzupdate.exe has been detected as Ransom.Wacatac
File Details
| Product Name: |
|
| MD5: |
645e620da17aa3bb8a685179be4decc9 |
| Size: |
10 MB |
| First Published: |
2025-02-28 23:04:57 (5 months ago) |
| Latest Published: |
2025-02-28 23:04:57 (5 months ago) |
| Status: |
Ransom.Wacatac (on last analysis) |
|
| Analysis Date: |
2025-02-28 23:04:57 (5 months ago) |
Overview
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0103a058 |
| Name |
Size of data |
MD5 |
| |
19456 |
37006923ef123327121293a7f1e5f8b7 |
| |
1536 |
001880845563a93dfef4625a0b58f1db |
| |
512 |
c2a2b785cebbc37d5d2e1918b336eb96 |
| .ndata |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| |
8601600 |
49bd6025b418d65132a5ddb9004054a1 |
| .idata |
512 |
416682ef238eb57b344aeca1a0d1d0cc |
| .rsrc |
148480 |
b64981d67cdf9fd7456df23185b8a6f2 |
| .themida |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .boot |
2504704 |
a633f729c37529f681d4024f5486de3a |
|
32768 |
0e4fc8b52487604ee02f1a1833eea43f |
