How to remove 8TPFa6Jj28A0655zX5pbUeMu.exe

» File
File Details
Overview
Analysis

8TPFa6Jj28A0655zX5pbUeMu.exe

The module 8TPFa6Jj28A0655zX5pbUeMu.exe has been detected as Ransom.Sabsik

8TPFa6Jj28A0655zX5pbUeMu.exe

Remove 8TPFa6Jj28A0655zX5pb

File Details

Main Info:

Product Name:	Atomic Wallet
Company Name:	atomicwallet.io
MD5:	cbf560b445c3f7818ce0a744f1cbe6f5
Size:	69 KB
First Published:	2021-12-11 21:41:05 (3 years ago)
Latest Published:	2021-12-11 21:41:05 (3 years ago)

Analysis:

Status:	Ransom.Sabsik (on last analysis)
Analysis Date:	2021-12-11 21:41:05 (3 years ago)

Overview

Digital Signature

Signed By:	Skylum Software USA, Inc.
Status:	Invalid (digital signature could be stolen or file could be patched)

Common Places:

%profile%\onedrive\fotos\imágenes

Geography:

100.0%

OS Version:

Windows 10

100.0%

Analysis

PE Info:

Subsystem:	Windows GUI
PE Type:	pe
OS Bitness:	32
Image Base:	0x00400000
Entry Address:	0x0000881a

.NET Info:

MVID:	c5264c85-1768-422c-8d18-2174efbf439c
Typelib ID:	655331df-94c9-4832-a6e7-83bb0683a11e

PE Sections:

Name	Size of data	MD5
.text	27136	c52bcaa0e0fdad340288aaa468e1e9ff
.rsrc	35328	95d21b1032e01e331c2b6a4f1cd90b5f
.reloc	512	40c4e0f497bf9a4fdd897e5e7f576fe9

More information:

Search on Virustotal

Download GridinSoft Anti-Malware - Removal tool for 8TPFa6Jj28A0655zX5pbUeMu.exe

copyright for information about 8TPFa6Jj28A0655zX5pbUeMu.exe