How to remove AutomationWorkshopServiceGuard.exe

AutomationWorkshopServiceGuard.exe

The module AutomationWorkshopServiceGuard.exe has been detected as Ransom.Exp

AutomationWorkshopServiceGuard.exe
Product Name:

Febooti Automation Workshop

Company Name:

Febooti, Ltd.

MD5: a82e774884fc2fe9ccdd1cc639b36b9c
Size: 111 KB
First Published: 2025-03-30 23:01:43 (3 days ago)
Latest Published: 2025-03-30 23:01:43 (3 days ago)
Status: Ransom.Exp (on last analysis)
Analysis Date: 2025-03-30 23:01:43 (3 days ago)
%programfiles%
100.0%
Windows 10 100.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000140000000
Entry Address: 0x00001558

PE Sections:

Name Size of data MD5
.text 43008 a5bcef58e7275ddd0562847012a52acd
.rdata 36864 e807db9a3e90de0934ef9aa69c7a84b1
.data 2560 0981dc84439b53e80df56c298e2ac06e
.pdata 3584 15d5181606599d7c185afdcfe72c4e30
_RDATA 512 c2556a20a5312a09a9351567dd9eef97
.rsrc 16896 82a449cf5d7288238179032ae658e230
.reloc 2048 00ed403b95f07a3e5138da6da6e4789d

More information:

Download GridinSoft Anti-Malware - Removal tool for AutomationWorkshopServiceGuard.exe