How to remove 27FB.exe
27FB.exe
The module 27FB.exe has been detected as Ransom.Sabsik
File Details
| Company Name: | Torchok |
| MD5: | c820ea803a0126731c29ae626d33dde6 |
| Size: | 185 KB |
| First Published: | 2024-04-06 23:01:35 (2 years ago) |
| Latest Published: | 2024-04-06 23:01:35 (2 years ago) |
| Status: | Ransom.Sabsik (on last analysis) | |
| Analysis Date: | 2024-04-06 23:01:35 (2 years ago) |
Common Places:
| %sysdrive%\system volume information\systemrestore\frstaging\users\helena\appdata\local |
Geography:
| 100.0% |
OS Version:
| Windows 7 | 100.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x0000143e |
PE Sections:
| Name | Size of data | MD5 |
| .text | 133632 | 2a3ecf8d57fe530f685ad3742295ea30 |
| .rdata | 11264 | d0838123a1fde554b2ea6dcb8bc5c5e7 |
| .data | 11264 | ba051a840de0773da25dcc3d363f32b0 |
| .rsrc | 32256 | 7d8dbacfe480fc97add7c88d882d8668 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for 27FB.exe
