How to remove XTZ3XRW70hhPdYvT6VSVoi8M.exe

XTZ3XRW70hhPdYvT6VSVoi8M.exe

The module XTZ3XRW70hhPdYvT6VSVoi8M.exe has been detected as Ransom.STOP

XTZ3XRW70hhPdYvT6VSVoi8M.exe
Remove XTZ3XRW70hhPdYvT6VSV

File Details

Product Name:

Circuza
MD5: 2a8bdc451f74b2a94f3f87cc2c5357a6
Size: 288 KB
First Published: 2024-03-07 23:29:30 (a year ago)
Latest Published: 2024-11-11 23:00:50 (6 months ago)
Status: Ransom.STOP (on last analysis)
Analysis Date: 2024-11-11 23:00:50 (6 months ago)

Common Places:

%profile%\onedrive\documentos
%mydoc%
%mydoc%
%mydoc%

Geography:

75.0%
25.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000092fa

PE Sections:

Name Size of data MD5
.text 84480 67934a367fae21348d3879c715e0bc5a
.data 187392 2d6a4a406743c19960c028921076f1cc
.idata 3072 06be2950f13245b85ec1bfe092b145fd
.rsrc 18944 14154639fe8f2e9a83fa11044e70aaf9

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for XTZ3XRW70hhPdYvT6VSVoi8M.exe
copyright for information about XTZ3XRW70hhPdYvT6VSVoi8M.exe