How to remove DifXInst32.exe
- File Details
- Overview
- Analysis
DifXInst32.exe
The module DifXInst32.exe has been detected as Adware.BrowseFox
File Details
Product Name: |
|
Company Name: |
|
MD5: |
f9504864f26eb6fcf1d75acdd5d88c3a |
Size: |
112 KB |
First Published: |
2017-05-22 02:09:31 (7 years ago) |
Latest Published: |
2020-05-21 15:25:39 (4 years ago) |
Status: |
Adware.BrowseFox (on last analysis) |
|
Analysis Date: |
2020-05-21 15:25:39 (4 years ago) |
%allusersprofile%\\application data\b0ffcdd9-5261-4e59-b29a-17a4fabdebab\x86 |
%commonappdata%\b0ffcdd9-5261-4e59-b29a-17a4fabdebab\x86 |
%allusersprofile%\\dati applicazioni\b0ffcdd9-5261-4e59-b29a-17a4fabdebab\x86 |
%appdata%\\b0ffcdd9-5261-4e59-b29a-17a4fabdebab\x86 |
%allusersprofile%\\start menu\programs\application data\b0ffcdd9-5261-4e59-b29a-17a4fabdebab\x86 |
%allusersprofile%\.windows.0\application data\b0ffcdd9-5261-4e59-b29a-17a4fabdebab\x86 |
%sysdrive%\dokumente und einstellungen\all users\anwendungsdaten\b0ffcdd9-5261-4e59-b29a-17a4fabdebab\x86 |
%allusersprofile%\.windows\application data\b0ffcdd9-5261-4e59-b29a-17a4fabdebab\x86 |
%allusersprofile%\\datos de programa\b0ffcdd9-5261-4e59-b29a-17a4fabdebab\x86 |
%allusersprofile%\\dane aplikacji\b0ffcdd9-5261-4e59-b29a-17a4fabdebab\x86 |
Italy |
10.8% |
|
Vietnam |
9.5% |
|
United States |
8.0% |
|
Thailand |
6.1% |
|
Taiwan |
4.9% |
|
Saudi Arabia |
4.8% |
|
Malaysia |
3.6% |
|
Turkey |
3.2% |
|
France |
3.0% |
|
Indonesia |
3.0% |
|
United Kingdom |
3.0% |
|
Ukraine |
2.9% |
|
Iran |
2.3% |
|
India |
1.9% |
|
Spain |
1.9% |
|
Russia |
1.7% |
|
Poland |
1.7% |
|
Brazil |
1.5% |
|
Serbia |
1.5% |
|
Hong Kong |
1.5% |
|
Netherlands |
1.3% |
|
Japan |
1.3% |
|
Mexico |
1.3% |
|
Israel |
1.3% |
|
China |
1.1% |
|
Egypt |
1.1% |
|
Romania |
1.0% |
|
Germany |
0.8% |
|
Belgium |
0.8% |
|
Libya |
0.8% |
|
Hungary |
0.8% |
|
Tunisia |
0.6% |
|
South Korea |
0.6% |
|
Argentina |
0.6% |
|
Algeria |
0.6% |
|
United Arab Emirates |
0.6% |
|
Canada |
0.6% |
|
Singapore |
0.6% |
|
Morocco |
0.4% |
|
Croatia |
0.4% |
|
Norway |
0.4% |
|
Switzerland |
0.4% |
|
Portugal |
0.4% |
|
Venezuela |
0.4% |
|
Peru |
0.4% |
|
Latvia |
0.4% |
|
Myanmar |
0.4% |
|
Kenya |
0.4% |
|
Kazakhstan |
0.2% |
|
Mozambique |
0.2% |
|
Yemen |
0.2% |
|
Sweden |
0.2% |
|
Chile |
0.2% |
|
Bosnia and Herzegovina |
0.2% |
|
El Salvador |
0.2% |
|
Paraguay |
0.2% |
|
Belarus |
0.2% |
|
Georgia |
0.2% |
|
Mongolia |
0.2% |
|
Kuwait |
0.2% |
|
Denmark |
0.2% |
|
Lebanon |
0.2% |
|
Czech Republic |
0.2% |
|
Australia |
0.2% |
|
Moldova |
0.2% |
|
Ethiopia |
0.2% |
|
Finland |
0.2% |
|
Windows XP |
38.5% |
|
Windows 7 |
32.3% |
|
Windows Vista |
22.4% |
|
Windows 10 |
4.5% |
|
Windows 8.1 |
1.3% |
|
Windows 8 |
0.9% |
|
Analysis
Subsystem: |
Windows CUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00008b9c |
Name |
Size of data |
MD5 |
.text |
72704 |
35c6f64de3036c3712158491d85e950a |
.rdata |
24064 |
4a4f1b39739ffb94c41edeb64fc751bf |
.data |
4096 |
704450c8fb73057d75ee30087cf7191b |
.rsrc |
2048 |
474420b6e878688175fa2e684c6f44a5 |
.reloc |
6144 |
5f26d92cde2d78b8c9ef55141536ec90 |