How to remove wKXnfkUwI6ZVjw9bKHzipcQB.exe

wKXnfkUwI6ZVjw9bKHzipcQB.exe

The module wKXnfkUwI6ZVjw9bKHzipcQB.exe has been detected as Ransom.STOP

wKXnfkUwI6ZVjw9bKHzipcQB.exe
Remove wKXnfkUwI6ZVjw9bKHzi

File Details

Product Name:

Tubus
MD5: 5af36347d587af525c9edead829b3c6e
Size: 4 MB
First Published: 2024-02-23 23:42:37 (a year ago)
Latest Published: 2024-02-23 23:43:44 (a year ago)
Status: Ransom.STOP (on last analysis)
Analysis Date: 2024-02-23 23:43:44 (a year ago)

Overview

Signed By: 522b0300053323224d0036132e0352222e2216260b17250f343c151c22001a3b0d00
Status: Valid

Common Places:

%localappdata%
%localappdata%
%localappdata%
%localappdata%

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00002203

PE Sections:

Name Size of data MD5
.text 4231168 4e2baf1eae9dd8a8b137b724c33a3d72
.rdata 15360 0f6c7ea23dfd8e9520239265b01f06ae
.data 20992 1ed17fc8b0cc2c3ec4a6cf42e620c364
.rsrc 65024 be78218b0f1ae0619c4f56504d70929b

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for wKXnfkUwI6ZVjw9bKHzipcQB.exe
copyright for information about wKXnfkUwI6ZVjw9bKHzipcQB.exe