How to remove HIDBFCBGDB.exe

HIDBFCBGDB.exe

The module HIDBFCBGDB.exe has been detected as Ransom.Wacatac

HIDBFCBGDB.exe
Remove HIDBFCBGDB.exe

File Details

Product Name:

EA app
Company Name:

Electronic Arts
MD5: 6f82104b06cc526e5c1a1f6b09d728ce
Size: 2 MB
First Published: 2024-04-30 23:04:55 (a year ago)
Latest Published: 2024-05-28 23:01:28 (a year ago)
Status: Ransom.Wacatac (on last analysis)
Analysis Date: 2024-05-28 23:01:28 (a year ago)

Overview

Signed By: OpenVPN Technologies, Inc.
Status: Invalid (digital signature could be stolen or file could be patched)

Common Places:

%commonappdata%
%commonappdata%

Geography:

50.0%
50.0%

OS Version:

Windows 10 50.0%
Windows 8.1 50.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0025af7e

.NET Info:

MVID: a2f2c64f-09c2-47f2-b961-cd695493cd2d
Typelib ID: 79e83361-4910-42d1-8fe0-4906d1bec7dd

PE Sections:

Name Size of data MD5
.text 2461696 2fb142741dc29236897ff0ac80373b2d
.rsrc 384000 957b7e0ee461b3e861d0d03d7d081c0c
.reloc 512 36b2668937cb87a68129f8822caacfee

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for HIDBFCBGDB.exe
copyright for information about HIDBFCBGDB.exe