How to remove hw_tool_cn.exe

hw_tool_cn.exe

The module hw_tool_cn.exe has been detected as Ransom.Wacatac

hw_tool_cn.exe
MD5: 98e78824c72a9719d996893d03aff728
Size: 4 MB
First Published: 2019-11-16 08:45:20 (4 years ago)
Latest Published: 2024-07-18 23:02:16 (2 days ago)
Status: Ransom.Wacatac (on last analysis)
Analysis Date: 2024-07-18 23:02:16 (2 days ago)
%sysdrive%\app service hp\mrt\copy of mrt_v3.29
%desktop%\mrt 3.19 flashgsm
%desktop%\mrt 3.19 flashgsm
%desktop%\mrt_v3.35
%sysdrive%\$recycle.bin\s-1-5-21-87363053-152748283-3601849089-1001\$r7w1yii
%sysdrive%\paid software\new\mrt setup\mrt 3.53_repairmymobile\mrt 3.53
%desktop%\mrt_v3.53_setup
%desktop%\mrt_v3.53_setup
%desktop%\mrt_v3.53_setup
%sysdrive%\mrt\long74_mrt_v3.36
22.4%
14.3%
8.2%
6.1%
6.1%
6.1%
4.1%
4.1%
4.1%
4.1%
4.1%
2.0%
2.0%
2.0%
2.0%
2.0%
2.0%
2.0%
2.0%
Windows 10 65.3%
Windows 7 32.7%
Windows 8.1 2.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00c4dd59

PE Sections:

Name Size of data MD5
.text 0 00000000000000000000000000000000
.data 0 00000000000000000000000000000000
.tls 0 00000000000000000000000000000000
.rdata 0 00000000000000000000000000000000
.idata 0 00000000000000000000000000000000
.edata 0 00000000000000000000000000000000
.vmp0 0 00000000000000000000000000000000
.vmp1 4989440 25cfe9ce2409c7e34478c7d5e76b8fc5
.rsrc 17920 a85cc076bfdb9e89d1f4fc8a3b353fde

More information:

Download GridinSoft Anti-Malware - Removal tool for hw_tool_cn.exe