How to remove 5EMLGMH33CJKXMSILIOW35.exe

» File
File Details
Overview
Analysis

5EMLGMH33CJKXMSILIOW35.exe

The module 5EMLGMH33CJKXMSILIOW35.exe has been detected as Ransom.Wacatac

5EMLGMH33CJKXMSILIOW35.exe

Remove 5EMLGMH33CJKXMSILIOW

File Details

Main Info:

Product Name:	Phoebe
Company Name:	Lunascape Corporation
MD5:	785d59f282da483bba4d5586f2767137
Size:	12 MB
First Published:	2025-03-31 23:01:19 (2 days ago)
Latest Published:	2025-03-31 23:01:19 (2 days ago)

Analysis:

Status:	Ransom.Wacatac (on last analysis)
Analysis Date:	2025-03-31 23:01:19 (2 days ago)

Overview

Digital Signature

Signed By:	Hong Kong Everimaging Science and Technology Co., Limited
Status:	Invalid (digital signature could be stolen or file could be patched)

Common Places:

%temp%

Geography:

100.0%

OS Version:

Windows 10

100.0%

Analysis

PE Info:

Subsystem:	Windows GUI
PE Type:	pe
OS Bitness:	32
Image Base:	0x00400000
Entry Address:	0x000113bc

PE Sections:

Name	Size of data	MD5
.text	61952	1a600bbd86f701d3e6b2978b57906082
.itext	3072	0b6f227afa44fd825f60bccacb9073bf
.data	3584	da9cb156b6104ba552cb70804b8a50a3
.bss	0	d41d8cd98f00b204e9800998ecf8427e
.idata	3584	93d91a2b90e60bd758fc0c4908856ae1
.tls	0	d41d8cd98f00b204e9800998ecf8427e
.rdata	512	3dffc444ccc131c9dcee18db49ee6403
.rsrc	45568	fd44ff245be2daa98a18841d1f4ea294

More information:

Search on Virustotal

Download GridinSoft Anti-Malware - Removal tool for 5EMLGMH33CJKXMSILIOW35.exe

copyright for information about 5EMLGMH33CJKXMSILIOW35.exe