How to remove DoN1quSWreAFiwRFbA7sl8uj.exe

DoN1quSWreAFiwRFbA7sl8uj.exe

The module DoN1quSWreAFiwRFbA7sl8uj.exe has been detected as Ransom.STOP

DoN1quSWreAFiwRFbA7sl8uj.exe
Remove DoN1quSWreAFiwRFbA7s

File Details

MD5: 112708c3d41822f9f74708b6f2b91e4a
Size: 4 MB
First Published: 2024-03-12 23:11:36 (2 years ago)
Latest Published: 2024-03-12 23:11:37 (2 years ago)
Status: Ransom.STOP (on last analysis)
Analysis Date: 2024-03-12 23:11:37 (2 years ago)

Overview

Signed By: 522910322628070b250c52200b542f1a57031b422732351e332f4620190820022d0b
Status: Valid

Common Places:

%profile%\onedrive\documents
%profile%\onedrive\documents

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000011e5

PE Sections:

Name Size of data MD5
.text 38400 a59169e3ba2983e06f0bc027636b6840
.rdata 4200448 819bb86722d3aa5c129b80ce1a8d1f9c
.data 10240 7c632532c4b224ef74e0d9457c117329
.rsrc 31744 7979215a9b3ceab013e4af7dd9bde680

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for DoN1quSWreAFiwRFbA7sl8uj.exe
copyright for information about DoN1quSWreAFiwRFbA7sl8uj.exe