How to remove CF92.exe
CF92.exe
The module CF92.exe has been detected as Ransom.Wacatac
File Details
| Product Name: | Antivirus Live CD 42.0 |
| Company Name: | Antivirus Live CD 42.0 Computer Inc. |
| MD5: | 1d63dcdef0e65309d515cdc7aa0fdb62 |
| Size: | 8 MB |
| First Published: | 2024-07-19 23:01:06 (11 months ago) |
| Latest Published: | 2024-07-20 23:04:29 (11 months ago) |
| Status: | Ransom.Wacatac (on last analysis) | |
| Analysis Date: | 2024-07-20 23:04:29 (11 months ago) |
Common Places:
| %temp% |
| %temp% |
| %temp% |
| %temp% |
Geography:
| 50.0% | ||
| 25.0% | ||
| 25.0% |
OS Version:
| Windows 10 | 100.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 64 |
| Image Base: | 0x0000000140000000 |
| Entry Address: | 0x000014c0 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 3681792 | a433c46ad37b11e430dc82e4c1d813d1 |
| .data | 420864 | cbb82dbd1f4246faaa766b71ea176791 |
| .rdata | 4503040 | e9d95b88064272bf8b9815d6854df21a |
| .pdata | 88064 | 757e772c724ac04f79d6865866bc44e9 |
| .xdata | 3584 | 2f9ef264f5305f96484c41baad9cd470 |
| .bss | 0 | d41d8cd98f00b204e9800998ecf8427e |
| .edata | 512 | 3991103e91b3a520b0b23f4837692f38 |
| .idata | 5632 | 31ebb8359058ebc95a9957535f276434 |
| .CRT | 512 | d1ac5ad6ee68d009fafc3674fc5007a3 |
| .tls | 512 | bf619eac0cdf3f68d496ea9344137e8b |
| .rsrc | 228352 | c0e00205da7129970eb1f1b80909d1b2 |
| .reloc | 78336 | 13151f14ffd7c63099eef8184e78379e |
More information:
Download GridinSoft
Anti-Malware - Removal tool for CF92.exe
