How to remove Mheqoqlhfvcepdfxhost32_12.exe

Mheqoqlhfvcepdfxhost32_12.exe

The module Mheqoqlhfvcepdfxhost32_12.exe has been detected as Ransom.Sabsik

Mheqoqlhfvcepdfxhost32_12.exe
Product Name:

PDF-XChange® Editor

Company Name:

Tracker Software Products (Canada) Ltd.

MD5: 72a38622e333cda0ea5e52037931bde0
Size: 372 KB
First Published: 2022-08-11 23:16:59 (2 years ago)
Latest Published: 2022-08-11 23:16:59 (2 years ago)
Status: Ransom.Sabsik (on last analysis)
Analysis Date: 2022-08-11 23:16:59 (2 years ago)
%temp%
100.0%
Windows 10 100.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0000324e

.NET Info:

MVID: 98c8a18d-21de-4e63-a45f-a7f1fd79c4c6
Typelib ID: 5d38b1a2-33c4-410c-82d4-6874e230103e

PE Sections:

Name Size of data MD5
.text 5120 49fe86db6c333e6c8318df9bef5671d5
.rsrc 374784 2efc0ea1cc0972f1940f3aea8e950358
.reloc 512 80780d9de55f8ed5a6a243f323e60c4e

More information:

Download GridinSoft Anti-Malware - Removal tool for Mheqoqlhfvcepdfxhost32_12.exe