How to remove QTuql72K0H.exe

» File
File Details
Overview
Analysis

QTuql72K0H.exe

The module QTuql72K0H.exe has been detected as Ransom.Sabsik

QTuql72K0H.exe

Remove QTuql72K0H.exe

File Details

Main Info:

Product Name:	Application Installer
MD5:	6e93ef164d06fc91202e4f38632ea593
Size:	4 MB
First Published:	2023-02-15 23:48:06 (2 years ago)
Latest Published:	2023-02-15 23:48:06 (2 years ago)

Analysis:

Status:	Ransom.Sabsik (on last analysis)
Analysis Date:	2023-02-15 23:48:06 (2 years ago)

Overview

Digital Signature

Signed By:	Opera Norway AS
Status:	Invalid (digital signature could be stolen or file could be patched)

Common Places:

%appdata%

Geography:

100.0%

OS Version:

Windows 10

100.0%

Analysis

PE Info:

Subsystem:	Windows GUI
PE Type:	pe
OS Bitness:	64
Image Base:	0x0000000140000000
Entry Address:	0x00929fb8

PE Sections:

Name	Size of data	MD5
	17408	362e696f2832fe2c2dee0738db732846
	2048	dfd2022d65f20c23d185103e560c338a
	512	718dc795058da899461a757183c2dadc
	1024	2946d73688e668a56df5b09d05d7cf64
	3269632	daa7553ce68bb9a226d6cf4e4227cd5b
	512	21746dd3b3e923c5f33f4af2a6305fdc
.rsrc	89088	35fec96576dbb33d69606e2e3c609f41
	245248	d088cc898e4b33ad1fd46d74cb3ac5fc
	1239040	713a8de74c328a64904e55dcb088425f

More information:

Search on Virustotal

Download GridinSoft Anti-Malware - Removal tool for QTuql72K0H.exe

copyright for information about QTuql72K0H.exe