How to remove PerfWatson2.exe

PerfWatson2.exe

The module PerfWatson2.exe has been detected as Ransom.Sabsik

PerfWatson2.exe
Remove PerfWatson2.exe

File Details

Product Name:

EdrawMax
Company Name:

EdrawSoft
MD5: 81e1c52782e14bfeebf13b6a8928caed
Size: 6 MB
First Published: 2022-08-10 23:33:41 (3 years ago)
Latest Published: 2023-10-04 23:02:40 (2 years ago)
Status: Ransom.Sabsik (on last analysis)
Analysis Date: 2023-10-04 23:02:40 (2 years ago)

Common Places:

%appdata%\microsoft
%appdata%
%commonappdata%
%commonappdata%
%appdata%\microsoft
%appdata%\microsoft

Geography:

50.0%
33.3%
16.7%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x004a4811

PE Sections:

Name Size of data MD5
.text 0 d41d8cd98f00b204e9800998ecf8427e
.rdata 0 d41d8cd98f00b204e9800998ecf8427e
.data 0 d41d8cd98f00b204e9800998ecf8427e
.#Bk 0 d41d8cd98f00b204e9800998ecf8427e
.{2^ 1024 121214d402bec301ae4c0574ff280af7
.?t] 6860800 97746066c568fb0452c422c3039d1510
.reloc 1536 28f178d92f43dce2819104a343263d33
.rsrc 1536 16b7b3491e2ca1689f6f8490712a378c

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for PerfWatson2.exe
copyright for information about PerfWatson2.exe