How to remove imhelper.exe

imhelper.exe

The module imhelper.exe has been detected as Ransom.Wacatac

imhelper.exe
Remove imhelper.exe

File Details

Product Name:

imhelper
MD5: ea16f001ecf9cb0bc70fc0a98f1698ef
Size: 213 KB
First Published: 2024-02-12 23:15:21 (2 years ago)
Latest Published: 2024-02-12 23:15:21 (2 years ago)
Status: Ransom.Wacatac (on last analysis)
Analysis Date: 2024-02-12 23:15:21 (2 years ago)

Common Places:

%sysdrive%\hydra tool

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0002324e

.NET Info:

MVID: 4be252d1-94fc-4cd5-bdcb-bc251b13bba2
Typelib ID: 085f4974-2917-468b-8ee2-5272baa27751

PE Sections:

Name Size of data MD5
.text 136192 718a052a70e82037cce87bdb1cd1faf4
.rsrc 81408 51398744320c4b526187f62156038f1d
.reloc 512 2ee497b98e01eba8eaeae03c9f7d5f94

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for imhelper.exe
copyright for information about imhelper.exe