How to remove ctsfil.exe
ctsfil.exe
The module ctsfil.exe has been detected as Ransom.Exp
File Details
| Product Name: | c-treeACE Database |
| Company Name: | FairCom Corporation |
| MD5: | 85d716ed8f439858d3e90d17c21b5306 |
| Size: | 1 MB |
| First Published: | 2021-01-05 10:37:20 (4 years ago) |
| Latest Published: | 2021-01-10 00:31:13 (4 years ago) |
| Status: | Ransom.Exp (on last analysis) | |
| Analysis Date: | 2021-01-10 00:31:13 (4 years ago) |
Common Places:
| %desktop%\dbfilesfromrecyc\schuyler\faircom\win32\tools\cmdline\utils |
| %sysdrive%\schuyler\faircom\win32\tools\cmdline\utils |
| %desktop%\dbfilesfromrecyc\schuyler\faircom\win32\tools\cmdline\utils |
| %sysdrive%\schuyler\faircom\win32\tools\cmdline\utils |
| %sysdrive%\schuyler\faircom\win32\tools\cmdline\utils |
| %desktop%\dbfilesfromrecyc\schuyler\faircom\win32\tools\cmdline\utils |
Geography:
| 100.0% |
OS Version:
| Windows Server 2016 | 100.0% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x000f78e2 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 1469952 | 0c48b12a7c86f3c3487dd0fd7223d3d3 |
| .rdata | 79360 | 799656d37957279ab39d8787b10499b0 |
| .data | 112640 | e004dfabf3c783ff06074fdf24803ed4 |
| .idata | 4608 | 93f924e3e4b89f66cbe947435ab84cfd |
| .rsrc | 2048 | 2f940b20ca40b8c31f96ffb98833f043 |
| .reloc | 39936 | cdf51044d02351d44ceb8cff56cb4e2c |
More information:
Download GridinSoft
Anti-Malware - Removal tool for ctsfil.exe
