How to remove ks35uw0grnx.exe

ks35uw0grnx.exe

The module ks35uw0grnx.exe has been detected as Ransom.Wacatac

ks35uw0grnx.exe
Remove ks35uw0grnx.exe

File Details

Product Name:

StreamlabsOBS
Company Name:

General Workings, Inc.
MD5: c974cb7ac01a7be4900f543428724f3c
Size: 1 MB
First Published: 2020-12-25 20:41:24 (3 years ago)
Latest Published: 2020-12-27 06:20:46 (3 years ago)
Status: Ransom.Wacatac (on last analysis)
Analysis Date: 2020-12-27 06:20:46 (3 years ago)

Overview

Signed By: Streamlabs (General Workings, Inc.)
Status: Invalid (digital signature could be stolen or file could be patched)

Common Places:

%startup%
%temp%
%temp%
%temp%
%startup%
%sysdrive%\$recycle.bin
%temp%

Geography:

57.1%
14.3%
14.3%
14.3%

OS Version:

Windows 7 71.4%
Windows 10 14.3%
Windows 8.1 14.3%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0012ac4e

.NET Info:

MVID: 6dff50d0-d8dc-469e-94d6-aab21201a954

PE Sections:

Name Size of data MD5
.text 1216000 8108a180fd01d23be206805134975044
.reloc 512 de12188ed4a546bac40c2daa2ad01257
.rsrc 2048 5b9afa32e0d295897a0491f4128a7aea

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for ks35uw0grnx.exe
copyright for information about ks35uw0grnx.exe