How to remove nmGPfMD0qmX.exe

nmGPfMD0qmX.exe

The module nmGPfMD0qmX.exe has been detected as Ransom.Sabsik

nmGPfMD0qmX.exe
Remove nmGPfMD0qmX.exe

File Details

Product Name:

Java(TM) Platform SE 8 U311
Company Name:

Oracle Corporation
MD5: 67d1a1f6f5f4848eb1dbfcb009cc400c
Size: 1 MB
First Published: 2021-12-06 21:35:01 (3 years ago)
Latest Published: 2021-12-06 21:39:35 (3 years ago)
Status: Ransom.Sabsik (on last analysis)
Analysis Date: 2021-12-06 21:39:35 (3 years ago)

Common Places:

%sysdrive%\windows.old\users\h4ck3\appdata
%sysdrive%\windows.old\users\h4ck3\appdata

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00135000

PE Sections:

Name Size of data MD5
0 d41d8cd98f00b204e9800998ecf8427e
512 1b1590e3b1d2198a6d297b111ab0ed72
.rsrc 1044884 d319ecd3cd97ef9afa47cbde16dad669
96578 b837647226c2f7e7e5a65260cfe8e56b

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for nmGPfMD0qmX.exe
copyright for information about nmGPfMD0qmX.exe