How to remove 8901195289011952.exe

8901195289011952.exe

The module 8901195289011952.exe has been detected as Ransom.Sabsik

8901195289011952.exe
Product Name:

WinHost

Company Name:

WinHost

MD5: affced32e6a49760a92a4f006f1d11dc
Size: 119 KB
First Published: 2021-11-21 21:27:27 (3 years ago)
Latest Published: 2021-11-26 22:00:10 (3 years ago)
Status: Ransom.Sabsik (on last analysis)
Analysis Date: 2021-11-26 22:00:10 (3 years ago)
%appdata%
%appdata%
%appdata%
%temp%\rar$exa19300.15153\testdisk-7.1
50.0%
25.0%
25.0%
Windows 10 100.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0002400a

PE Sections:

Name Size of data MD5
Y!j-$e 79360 fa611474a012dc86b8e703e1e2d1d2e2
.text 38912 1c6df8ccd684890ee352116953cc2d95
.rsrc 1536 7e6f45cf8e34bd2de0c2d098ee94e7dd
.reloc 512 3418ed3940fad3d2428cc0b4f357943b
512 d6c730a7ad254bffa82e31186dbb1233

More information:

Download GridinSoft Anti-Malware - Removal tool for 8901195289011952.exe