home

cfp.exe

COMODO Internet Security

Comodo Security Solutions, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘COMODO Internet Security’.
Publisher:
COMODO  (signed by Comodo Security Solutions, Inc.)

Product:
COMODO Internet Security

Version:
5, 0, 162628, 1134

MD5:
589e68a05da6fc5bb95ffbf785475fe3

SHA-1:
3de1dd9e8e69336e5326d8e5e7636c4c84514437

SHA-256:
e38ae05e9cf6285436cffb04ae80c954babd625a4aec7332a1f4ad1f616a43e9

Scanner detections:
3 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/27/2024 5:29:48 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
W32/Sality.Patched
7.11.4.47

F-Prot
W32/Patched.Y.gen
4.6.5.141

IKARUS anti.virus
W32.Sality
t3scan.1.1.97.0

File size:
2.4 MB (2,500,552 bytes)

Product version:
5, 0, 162628, 1134

Copyright:
2005-2010 COMODO. All rights reserved.

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\comodo\comodo internet security\cfp.exe

Digital Signature
Signed by:
Comodo Security Solutions, Inc.

Authority:
VeriSign, Inc.

Valid from:
3/2/2010 8:00:00 AM

Valid to:
3/3/2011 7:59:59 AM

Subject:
CN="Comodo Security Solutions, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Comodo Security Solutions, Inc.", L=Jersey City, S=New Jersey, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2C01585522E8FA61138AEFA4F627EEA8

File PE Metadata
Compilation timestamp:
9/11/2010 6:05:55 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0xB4F26

Entry point:
C3, C3, C3, C3, C3, C3, C3, C3, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 04, EB, 0A, 9F, 73, 67, 90, EB, E3, D8, 32, 45, 3A, 55, 36, 7C, 7D, 5A, F7, E2, 1D, 4F, DD, A7, C1, BA, 04, 84, 2C, 68, 60, F0, EC, 45, 8C, 9C, 37, A8, 5F, 03, FB, 57, CD, FA, 24, B6, 0A, BE, 39, 9B, 89, 74, 0E, 75, 91, 21, 40, 2E, B0, AF, DB, 69, 89, BD, 74, 0F, 41, F8, 75, 09, D0, D8, 74, 97, 54, 78, 41, 55, 51, 50, 54, 42, A2, B0, 13, 3F, CB, B0, B2, 11, B7, 79, 4B...
 
[+]

Entropy:
7.4980

Code size:
3.9 MB (4,067,328 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
COMODO Internet Security

Command:
"C:\Program Files\comodo\comodo internet security\cfp.exe" -h


Scan cfp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.