How to remove Fzxe6XbIrZOL7jPgjaHofuYB.exe

Fzxe6XbIrZOL7jPgjaHofuYB.exe

The module Fzxe6XbIrZOL7jPgjaHofuYB.exe has been detected as Ransom.STOP

Fzxe6XbIrZOL7jPgjaHofuYB.exe
Remove Fzxe6XbIrZOL7jPgjaHo

File Details

MD5: 0e21d1c19e13a5aa020217495d3c7eea
Size: 4 MB
First Published: 2024-03-21 23:12:46 (a year ago)
Latest Published: 2024-03-21 23:12:47 (a year ago)
Status: Ransom.STOP (on last analysis)
Analysis Date: 2024-03-21 23:12:47 (a year ago)

Overview

Signed By: 522a29533d3f200e2d1728300c141021081631313626321023042b113f2d26353224
Status: Valid

Common Places:

%profile%\onedrive\belgeler
%sysdrive%\windows.old\users\zeyne\appdata\local\microsoft\windows\inetcache\ie

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00001396

PE Sections:

Name Size of data MD5
.text 32768 653e5a35e87fbec28601f1b61902587c
.rdata 4200960 0803e5070ffefd8a782b5f4032cd513f
.data 10240 c79775a0fd46a561d8b8a57e00b69584
.rsrc 108544 f770dec5f26bab556095683e99e9ff3c

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for Fzxe6XbIrZOL7jPgjaHofuYB.exe
copyright for information about Fzxe6XbIrZOL7jPgjaHofuYB.exe