How to remove XT7CIwD_fW4AWjz597wQIb4L.exe

XT7CIwD_fW4AWjz597wQIb4L.exe

The module XT7CIwD_fW4AWjz597wQIb4L.exe has been detected as Ransom.STOP

XT7CIwD_fW4AWjz597wQIb4L.exe
Remove XT7CIwD_fW4AWjz597wQ

File Details

MD5: 165a3550ad8255d54672d11390e75662
Size: 4 MB
First Published: 2024-05-05 23:00:42 (a year ago)
Latest Published: 2024-05-13 23:06:03 (a year ago)
Status: Ransom.STOP (on last analysis)
Analysis Date: 2024-05-13 23:06:03 (a year ago)

Overview

Signed By: 522a143c46533d0e442f37555c2422100a1455182550573d31351d0f013134332d19
Status: Valid

Common Places:

%mydoc%
%profile%\onedrive\documentos
%profile%\onedrive\documentos
%profile%\onedrive\documentos
%profile%\onedrive\documentos

Geography:

Brazil 80.0%
Indonesia 20.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0000182a

PE Sections:

Name Size of data MD5
.text 50688 07b48b3f3183d326e11bbb058ebd52c9
.rdata 4223488 6a0445434b0af7c0ebdc77a94cdbe7a6
.data 10752 90a00c3ace45ff3a38e7a26cb6695ef7
.rsrc 72704 f60b3ccc711c0d657242e60099219362

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for XT7CIwD_fW4AWjz597wQIb4L.exe
copyright for information about XT7CIwD_fW4AWjz597wQIb4L.exe
­