How to remove Wed1478efb8afde3196.exe

Wed1478efb8afde3196.exe

The module Wed1478efb8afde3196.exe has been detected as Ransom.Sabsik

Wed1478efb8afde3196.exe
Remove Wed1478efb8afde3196.

File Details

Product Name:

FarLabUninstaller.exe

Company Name:

FarLabUninstaller soft

MD5: 9668b7be120a22cc3b478d0748dd6369
Size: 379 KB
First Published: 2021-12-01 21:37:02 (3 years ago)
Latest Published: 2021-12-01 21:37:02 (3 years ago)
Status: Ransom.Sabsik (on last analysis)
Analysis Date: 2021-12-01 21:37:02 (3 years ago)

Common Places:

%temp%

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0000a5f8

PE Sections:

Name Size of data MD5
CODE 40448 c3bd95c4b1a8e5199981e0d9b45fd18c
DATA 1024 1ee71d84f1c77af85f1f5c278f880572
BSS 0 d41d8cd98f00b204e9800998ecf8427e
.idata 2560 bb5485bf968b970e5ea81292af2acdba
.tls 0 d41d8cd98f00b204e9800998ecf8427e
.rdata 512 9ba824905bf9c7922b6fc87a38b74366
.reloc 0 d41d8cd98f00b204e9800998ecf8427e
.rsrc 11264 4b4c5bd553132df06b7c04278cccaefb

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for Wed1478efb8afde3196.exe
copyright for information about Wed1478efb8afde3196.exe