Gridinsoft Logo

Game.exe Ransomware STOP/Djvu Analysis

Ransomware STOP/Djvu
Updated on 2024-06-21 (6 months ago)
Checked by Online Virus Scanner
Online Virus Checker v.1.0.179.174
DB Version: 2024-06-21 07:00:38

Ransom.Win32.STOP.tr

STOP/Djvu Ransomware, also known simply as STOP Ransomware or Djvu Ransomware, is a type of malicious software that encrypts the files on a victim's computer and demands a ransom for their decryption. This ransomware variant has been active for several years and has affected numerous users and organizations.

File game.exe
Checked 2024-06-21 04:57:45
MD5 9b3e38e023020228484dcc008d6f6e52
SHA1 16a218483c71a8edeb7c43a9ff3696e53c586ef2
SHA256 567ed29376b1cdfc820544d6d8e38d58187476a0b911226d5cb8e95f69dcba6f
SHA512 0f46c3509890560a4c753efb5d6b940b545a2619b277c536fae8cb2dab280def9afd61b7d7d7e0ab08a879dcf2288705e92a3066b37da1a1c2b0e0ca64e98399
Imphash 1c3aebb846cbbabbc7cfe5a60c0dd715
File Size 844288 bytes

Ransom.Win32.STOP.tr Removal

Ransom.Win32.STOP.tr Removal

Gridinsoft has the capability to identify and eliminate Ransom.Win32.STOP.tr without requiring further user intervention.

  • Start by downloading Gridinsoft Anti-Malware to your computer.
  • Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  • Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  • Click on the "Standard Scan" button.
  • After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  • If prompted, restart your system to complete the removal process.

File Version Information

FileVersions 76.51.27.10
InternalName sadf
FileDescription sadf
LegalCopyright Copyrights (C) 2023, sadf
OriginalFilenames asdf
ProductName asdf
ProductVersions 8.22.79
Translation 0x16fe 0x06da

Portable Executable Info

30e901e854a17b2ec09b301007fad46a
1f417353671ead591aa2e83badcb3843
92a2c8d2a482d468
Image Base: 0x00400000
Entry Point: 0x0040308b
Compilation: 2023-03-23 07:42:51
Checksum: 0x000d71b0 (Actual: 0x000d71b0)
OS Version: 5.1
PEiD: PE32 executable (GUI) Intel 80386, for MS Windows
Sign: The PE file does not contain a certificate table.
Sections: 4
Imports: KERNEL32,
Exports: 0
Resources: 72

Sections

Name Virtual Address Virtual Size Raw Size MD5 Entropy
.text 0x00001000 0x0000a3f0 0x0000a400 509e878b9b106be477f3b73e4b4eb732 6.82
.rdata 0x0000c000 0x00002e48 0x00003000 593d913dd9a0b3054b5b79b9080c62e0 4.84
.data 0x0000f000 0x000a12c0 0x00094000 9e6e4bfd39bd963c33395b2a906218b3 7.97
.rsrc 0x000b1000 0x0002c8f0 0x0002ca00 7e268806f15cb169f467b5ac34ec2b4f 4.84

Leave a comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware