How to remove ZHgsVu44glxLzwu2oZZO9Zfw.exe

ZHgsVu44glxLzwu2oZZO9Zfw.exe

The module ZHgsVu44glxLzwu2oZZO9Zfw.exe has been detected as Ransom.STOP

ZHgsVu44glxLzwu2oZZO9Zfw.exe
Remove ZHgsVu44glxLzwu2oZZO

File Details

Product Name:

Badabum
MD5: f6f4ac2faba25063d45d58898b15f67d
Size: 4 MB
First Published: 2026-01-30 23:01:05 (a week ago)
Latest Published: 2026-01-30 23:01:05 (a week ago)
Status: Ransom.STOP (on last analysis)
Analysis Date: 2026-01-30 23:01:05 (a week ago)

Overview

Signed By: 522910322628070b250c52200b542f1a57031b422732351e332f4620190820022d0b
Status: Valid

Common Places:

%localappdata%

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00004347

PE Sections:

Name Size of data MD5
.text 65536 cb8cb2501442a10047da8048179cc005
.rdata 28160 54c9761017315a1d725ae4a1c64d7db1
.data 4189184 1b4681ef367c43d1bf4b68c7b524c373
.rsrc 93184 dab70fcd592dfa114f52c9a9bad06e0f
.reloc 5120 e3815613c20ed2eec52121fde989e753

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for ZHgsVu44glxLzwu2oZZO9Zfw.exe
copyright for information about ZHgsVu44glxLzwu2oZZO9Zfw.exe