How to remove GEARDIFx.exe
- File Details
- Overview
- Analysis
GEARDIFx.exe
The module GEARDIFx.exe has been detected as Adware.BrowseFox
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
4110def8799f6b2f3f20b0bedff36ecb |
| Size: |
1 MB |
| First Published: |
2017-05-21 03:01:59 (7 years ago) |
| Latest Published: |
2020-05-21 15:26:22 (4 years ago) |
| Status: |
Adware.BrowseFox (on last analysis) |
|
| Analysis Date: |
2020-05-21 15:26:22 (4 years ago) |
Overview
| %commonappdata%\e1864a66-75e3-486a-bd95-d1b7d99a84a7 |
| %allusersprofile%\\application data\b0ffcdd9-5261-4e59-b29a-17a4fabdebab |
| %commonappdata%\b0ffcdd9-5261-4e59-b29a-17a4fabdebab |
| %allusersprofile%\\dati applicazioni\b0ffcdd9-5261-4e59-b29a-17a4fabdebab |
| %allusersprofile%\\datos de programa\b0ffcdd9-5261-4e59-b29a-17a4fabdebab |
| %allusersprofile%\\start menu\programs\application data\b0ffcdd9-5261-4e59-b29a-17a4fabdebab |
| %allusersprofile%\.windows.0\application data\b0ffcdd9-5261-4e59-b29a-17a4fabdebab |
| %sysdrive%\dokumente und einstellungen\all users\anwendungsdaten\b0ffcdd9-5261-4e59-b29a-17a4fabdebab |
| %allusersprofile%\.windows\application data\b0ffcdd9-5261-4e59-b29a-17a4fabdebab |
| %allusersprofile%\\dane aplikacji\b0ffcdd9-5261-4e59-b29a-17a4fabdebab |
| United States |
18.5% |
|
| Vietnam |
6.5% |
|
| Italy |
5.4% |
|
| Taiwan |
5.1% |
|
| Thailand |
4.6% |
|
| United Kingdom |
4.3% |
|
| Turkey |
3.8% |
|
| Russia |
3.0% |
|
| Sweden |
2.9% |
|
| France |
2.8% |
|
| Indonesia |
2.7% |
|
| Canada |
2.2% |
|
| Ukraine |
2.1% |
|
| Japan |
1.9% |
|
| Brazil |
1.8% |
|
| Mexico |
1.8% |
|
| Saudi Arabia |
1.7% |
|
| Netherlands |
1.6% |
|
| Iran |
1.4% |
|
| Malaysia |
1.3% |
|
| Belgium |
1.2% |
|
| Germany |
1.1% |
|
| Poland |
1.1% |
|
| South Korea |
1.1% |
|
| India |
1.0% |
|
| Hong Kong |
1.0% |
|
| Spain |
1.0% |
|
| Israel |
1.0% |
|
| Switzerland |
1.0% |
|
| Australia |
0.8% |
|
| Ireland |
0.8% |
|
| Singapore |
0.8% |
|
| Argentina |
0.7% |
|
| Colombia |
0.7% |
|
| Romania |
0.7% |
|
| Greece |
0.7% |
|
| Egypt |
0.4% |
|
| Serbia |
0.4% |
|
| Algeria |
0.4% |
|
| Portugal |
0.4% |
|
| Laos |
0.4% |
|
| Finland |
0.3% |
|
| China |
0.3% |
|
| Kenya |
0.3% |
|
| Peru |
0.3% |
|
| Czech Republic |
0.3% |
|
| Austria |
0.3% |
|
| Slovenia |
0.3% |
|
| Puerto Rico |
0.3% |
|
| Norway |
0.2% |
|
| Tunisia |
0.2% |
|
| Morocco |
0.2% |
|
| Iraq |
0.2% |
|
| Slovakia |
0.2% |
|
| Libya |
0.2% |
|
| Hungary |
0.2% |
|
| Denmark |
0.2% |
|
| Chile |
0.1% |
|
| New Zealand |
0.1% |
|
| Philippines |
0.1% |
|
| Kazakhstan |
0.1% |
|
| Lebanon |
0.1% |
|
| Croatia |
0.1% |
|
| Bulgaria |
0.1% |
|
| South Africa |
0.1% |
|
| Bosnia and Herzegovina |
0.1% |
|
| United Arab Emirates |
0.1% |
|
| Venezuela |
0.1% |
|
| Georgia |
0.1% |
|
| Latvia |
0.1% |
|
| Myanmar |
0.1% |
|
| Belarus |
0.1% |
|
| Nigeria |
0.1% |
|
| Costa Rica |
0.1% |
|
| Kuwait |
0.1% |
|
| Afghanistan |
0.1% |
|
| Reunion |
0.1% |
|
| Moldova |
0.1% |
|
| Guatemala |
0.1% |
|
| Ecuador |
0.1% |
|
| Zambia |
0.1% |
|
| Windows 7 |
36.7% |
|
| Windows 10 |
35.4% |
|
| Windows XP |
10.1% |
|
| Windows 8.1 |
9.6% |
|
| Windows Vista |
6.9% |
|
| Windows 8 |
1.2% |
|
| Windows Server 2008 R2 |
0.1% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00100697 |
| Name |
Size of data |
MD5 |
| .text |
1208832 |
735f1146f3bef9e5cf57052f734fa994 |
| .rdata |
282624 |
8c2e7dfcb82d782aad21d26e3d95676d |
| .data |
24576 |
b9c68c36b6be3ebe83ec5b0633690ec0 |
| .rsrc |
312320 |
eee6513ba1f9973248beb85f48116b4c |
| .reloc |
142848 |
c69fb14d636fcad5d0d5b270cbceeb4e |
