How to remove Rar64.exe
Rar64.exe
The module Rar64.exe has been detected as Ransom.Sabsik
File Details
| Product Name: | SevenZip Tools |
| Company Name: | 7zip |
| MD5: | 92606fca86292d58132a042005756b9e |
| Size: | 51 KB |
| First Published: | 2023-01-03 23:34:53 (3 years ago) |
| Latest Published: | 2023-01-03 23:34:53 (3 years ago) |
| Status: | Ransom.Sabsik (on last analysis) | |
| Analysis Date: | 2023-01-03 23:34:53 (3 years ago) |
Common Places:
| %programfiles% |
Geography:
| 100.0% |
OS Version:
| Windows 10 | 100.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x0000e22e |
.NET Info:
| MVID: | 510b1e3f-4620-43b1-8071-18f178997e10 |
| Typelib ID: | ac6e2d70-d9fa-49e4-9e8e-6adf9915e980 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 50176 | e10290a02060cbd5a756a3fe780acb67 |
| .rsrc | 1536 | 5039eb9263d8c8efebfc4c90d8646e61 |
| .reloc | 512 | bf0fc10393b88bde326ea861b8b54c7b |
More information:
Download GridinSoft
Anti-Malware - Removal tool for Rar64.exe