How to remove Offline eBIRForms Package v7.9.4 setup.exe

Offline eBIRForms Package v7.9.4 setup.exe

The module Offline eBIRForms Package v7.9.4 setup.exe has been detected as Ransom.Wacatac

Offline eBIRForms Package v7.9.4 setup.exe
Remove Offline eBIRForms Pa

File Details

Product Name:

eBIRForms

Company Name:

MD5: 4f0135fb0cb578496c656cf8b0322a35
Size: 11 MB
First Published: 2023-07-24 23:50:04 (2 years ago)
Latest Published: 2023-07-25 23:10:56 (2 years ago)
Status: Ransom.Wacatac (on last analysis)
Analysis Date: 2023-07-25 23:10:56 (2 years ago)

Common Places:

%desktop%
%desktop%

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0000aa98

PE Sections:

Name Size of data MD5
CODE 41472 b7ea439d9c6d5ec722056c9243fb3054
DATA 1024 9b2268ed5360951559d8041925d025fb
BSS 0 d41d8cd98f00b204e9800998ecf8427e
.idata 2560 df5f31e62e05c787fd29eed7071bf556
.tls 0 d41d8cd98f00b204e9800998ecf8427e
.rdata 512 14dfa4128117e7f94fe2f8d7dea374a0
.reloc 0 d41d8cd98f00b204e9800998ecf8427e
.rsrc 11264 5f6e4c441403743b2112ae7dfbb950a5

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for Offline eBIRForms Package v7.9.4 setup.exe
copyright for information about Offline eBIRForms Package v7.9.4 setup.exe