Zxspoofer.exe Ransomware AI Analysis
| Online Virus Checker | v.1.0.183.174 |
| DB Version: | 2024-07-26 03:00:22 |
Ransom.Win64.AI.sa
AI-based virus detection is a valuable addition to traditional signature-based antivirus methods. Signature-based approaches may struggle to detect new or polymorphic malware variants, making AI an essential tool in modern cybersecurity for proactive threat detection and mitigation.
| File | zxspoofer.exe |
| Checked | 2024-07-26 00:42:34 |
| MD5 | e6a1139ecd894280ed5b834ff480bb9f |
| SHA1 | c3f8ec9c0f15a65548e8578e5e305fc804d84ebc |
| SHA256 | c4c71cb5335e9f2c16b722e90774205a23c23045033d3509f3c4b2cb09b3c965 |
| SHA512 | e52023bfde310dc33ea9a83eb6626f0a16854f2fb2d00fd5cd0c359b44a4e0ca3fb0a7d7e9eee4b81a39e5e733aa834db129e8d24cfe803880e81e25e1c53b1c |
| Imphash | f326f88ca83c9aacaa44acfb8884f1d4 |
| File Size | 237568 bytes |
Ransom.Win64.AI.sa Removal
Gridinsoft has the capability to identify and eliminate Ransom.Win64.AI.sa without requiring further user intervention.
- Start by downloading Gridinsoft Anti-Malware to your computer.
- Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
- Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
- Click on the "Standard Scan" button.
- After the scanning process is finished, click on "Clean Now" to remove any detected threats.
- If prompted, restart your system to complete the removal process.
File Version Information
| ProductName | FiveM Spoo |
| FileDescription | FiveM Spoo |
| LegalCopyright | © Jonizz#0001. All rights reserved. |
| Translation | 0x0000 0x04e4 |
Portable Executable Info
 |
f47c64613b0d19ad6e63399ec6afbb83 8e8f3f733141923298b7d50f7af440a1 b26968d492b213e8 |
| Image Base: | 0x140000000 |
| Entry Point: | 0x140001000 |
| Compilation: | 2018-02-01 19:43:01 |
| Checksum: | 0x00000000 (Actual: 0x00045697) |
| OS Version: | 4.0 |
| PEiD: | PE32+ executable (console) x86-64, for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 6 |
| Imports: | msvcrt, KERNEL32, SHELL32, WINMM, OLE32, SHLWAPI, USER32, GDI32, COMCTL32, |
| Exports: | 0 |
| Resources: | 13 |
Sections
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| .code | 0x00001000 | 0x00005b79 | 0x00005c00 | aa16f98b8fe7f2b775e16d029f583896 | 5.51 |
| .text | 0x00007000 | 0x00010a35 | 0x00010c00 | 981bc6e1f1f7aa59aff461d618525a35 | 6.33 |
| .rdata | 0x00018000 | 0x00004b8d | 0x00004c00 | 626f5b2f4c9e5c74296566e1aedb36b8 | 6.68 |
| .pdata | 0x0001d000 | 0x00001134 | 0x00001200 | 160e0be5ce9d191773103a22e378fe5d | 4.99 |
| .data | 0x0001f000 | 0x000023a8 | 0x00001600 | b95936f1dfb10d2dba26f653fa6b2316 | 4.38 |
| .rsrc | 0x00022000 | 0x0001bfc0 | 0x0001c000 | 10a9029d516a4458af9e3ab0a7d2819e | 4.74 |
