How to remove PerfWatson2.exe

PerfWatson2.exe

The module PerfWatson2.exe has been detected as Ransom.Sabsik

PerfWatson2.exe
Remove PerfWatson2.exe

File Details

Product Name:

OBS Studio
Company Name:

OBS
MD5: bc642a671cf6085183d38e45a54a46ff
Size: 6 MB
First Published: 2022-08-21 23:46:12 (2 years ago)
Latest Published: 2023-11-20 23:18:15 (2 years ago)
Status: Ransom.Sabsik (on last analysis)
Analysis Date: 2023-11-20 23:18:15 (2 years ago)

Common Places:

%commonappdata%
%appdata%\microsoft
%appdata%
%appdata%
%appdata%

Geography:

42.9%
28.6%
14.3%
14.3%

OS Version:

Windows 10 71.4%
Windows 7 28.6%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x003c8651

PE Sections:

Name Size of data MD5
.text 0 d41d8cd98f00b204e9800998ecf8427e
.rdata 0 d41d8cd98f00b204e9800998ecf8427e
.data 0 d41d8cd98f00b204e9800998ecf8427e
.qD+ 0 d41d8cd98f00b204e9800998ecf8427e
.Nh7 1024 efbb5535b90ca812732fcb4c81a03c5e
.J/c 6877184 7e7ef3a215f6be2f3aff4dd51eeb5b34
.reloc 2048 04d0530a12d6e929887aa1d0cc346c91
.rsrc 1536 9998adbdcdaca8e903e00dbff26d6c94

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for PerfWatson2.exe
copyright for information about PerfWatson2.exe