How to remove AfFqfqY[2].exe

AfFqfqY[2].exe

The module AfFqfqY[2].exe has been detected as Ransom.Wacatac

AfFqfqY[2].exe
Remove AfFqfqY[2].exe

File Details

Product Name:

Xgsnmaah Thesdthz
Company Name:

Iwgbolcje Rqqyecrxdm
MD5: 401a88fa4f93e8c11d82813dd08f232c
Size: 933 KB
First Published: 2022-05-30 23:53:12 (3 years ago)
Latest Published: 2023-06-17 23:51:56 (2 years ago)
Status: Ransom.Wacatac (on last analysis)
Analysis Date: 2023-06-17 23:51:56 (2 years ago)

Common Places:

%localappdata%\microsoft\windows\inetcache\ie
%sysdrive%\windows.old\users\francisco\appdata\local\microsoft\windows\inetcache\ie
%localappdata%\microsoft\windows\temporary internet files\content.ie5
%localappdata%\microsoft\windows\inetcache\ie
%profile%\pictures

Geography:

40.0%
20.0%
20.0%
20.0%

OS Version:

Windows 10 60.0%
Windows 8.1 20.0%
Windows 7 20.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000067cc

PE Sections:

Name Size of data MD5
.text 26112 1828036d3e650ec322076438fe5121f4
.data 1024 317f8a934ee443eee01c2a315bde9ca1
.idata 4608 d8675ba112ef922c6057a02546757a1a
.rsrc 917504 1a2c8f25a5a95425de7ee91e0200b34f
.reloc 5120 83de2f9b2c95be6fea06bced7e8a058e

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for AfFqfqY[2].exe
copyright for information about AfFqfqY[2].exe