How to remove nclaS.exe
nclaS.exe
The module nclaS.exe has been detected as Ransom.Wacatac
File Details
| Product Name: | DIO CONSALTING |
| Company Name: | d12e1c |
| MD5: | 6fbf058c7a5c8b8889b6d3b043c956e3 |
| Size: | 5 MB |
| First Published: | 2022-10-17 23:21:20 (2 years ago) |
| Latest Published: | 2022-10-17 23:21:20 (2 years ago) |
| Status: | Ransom.Wacatac (on last analysis) | |
| Analysis Date: | 2022-10-17 23:21:20 (2 years ago) |
Common Places:
| %appdata% |
Geography:
| 100.0% |
OS Version:
| Windows 10 | 100.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x0026e6dc |
PE Sections:
| Name | Size of data | MD5 |
| .text | 2539008 | 80651a0e34065d09a399a126c333dc38 |
| .itext | 6144 | 72e3d2dbac3d76efcaea90025d648640 |
| .data | 38912 | b9699b3726da5cfb3e929a1fa150b028 |
| .bss | 0 | d41d8cd98f00b204e9800998ecf8427e |
| .idata | 16384 | 0dfb83c835ec1fdb57a058572d9bb8b9 |
| .didata | 3072 | bff198269dc80fc0f00207e0453b8946 |
| .edata | 512 | 27f6c148c019333cb1efc43106258594 |
| .tls | 0 | d41d8cd98f00b204e9800998ecf8427e |
| .rdata | 512 | 8d4062c8ab5dbe1939384ee38a25c5d6 |
| .reloc | 219136 | 22c8205570603ac331815ff278d7d3c3 |
| .rsrc | 604160 | d255f22cc89dcb9f8f1a50c3c9712dca |
More information:
Download GridinSoft
Anti-Malware - Removal tool for nclaS.exe
