How to remove ktab.exe
ktab.exe
The module ktab.exe has been detected as Ransom.Sabsik
File Details
| MD5: | b6378155e59df974f9ee43095facafa5 |
| Size: | 1 MB |
| First Published: | 2024-11-28 23:01:19 (2 weeks ago) |
| Latest Published: | 2024-11-28 23:01:19 (2 weeks ago) |
| Status: | Ransom.Sabsik (on last analysis) | |
| Analysis Date: | 2024-11-28 23:01:19 (2 weeks ago) |
Common Places:
| %sysdrive%\$recycle.bin\s-1-5-21-1014598480-681888142-1780288057-1002\$rgcfr91\jre6 |
Geography:
| 100.0% |
OS Version:
| Windows 10 | 100.0% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x00004337 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 14336 | c6f97d7908b427319e817ccc2b5b0b10 |
| .rdata | 9728 | 912d0a7033ad1379ceb6dc0bfee8f847 |
| .data | 512 | 24144499101e1b316e1cef40e6b3fe34 |
| .rsrc | 1499136 | 54ee1f5cf42f8022d2cb0e690934da55 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for ktab.exe
