How to remove GEARDIFx.exe
- File Details
- Overview
- Analysis
GEARDIFx.exe
The module GEARDIFx.exe has been detected as Adware.BrowseFox
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
4110def8799f6b2f3f20b0bedff36ecb |
| Size: |
1 MB |
| First Published: |
2017-05-21 03:01:59 (7 years ago) |
| Latest Published: |
2020-05-21 15:26:22 (4 years ago) |
| Status: |
Adware.BrowseFox (on last analysis) |
|
| Analysis Date: |
2020-05-21 15:26:22 (4 years ago) |
Overview
| %commonappdata%\e1864a66-75e3-486a-bd95-d1b7d99a84a7 |
| %allusersprofile%\\application data\b0ffcdd9-5261-4e59-b29a-17a4fabdebab |
| %commonappdata%\b0ffcdd9-5261-4e59-b29a-17a4fabdebab |
| %allusersprofile%\\dati applicazioni\b0ffcdd9-5261-4e59-b29a-17a4fabdebab |
| %allusersprofile%\\datos de programa\b0ffcdd9-5261-4e59-b29a-17a4fabdebab |
| %allusersprofile%\\start menu\programs\application data\b0ffcdd9-5261-4e59-b29a-17a4fabdebab |
| %allusersprofile%\.windows.0\application data\b0ffcdd9-5261-4e59-b29a-17a4fabdebab |
| %sysdrive%\dokumente und einstellungen\all users\anwendungsdaten\b0ffcdd9-5261-4e59-b29a-17a4fabdebab |
| %allusersprofile%\.windows\application data\b0ffcdd9-5261-4e59-b29a-17a4fabdebab |
| %allusersprofile%\\dane aplikacji\b0ffcdd9-5261-4e59-b29a-17a4fabdebab |
|
18.5% |
|
|
6.5% |
|
|
5.4% |
|
|
5.1% |
|
|
4.6% |
|
|
4.3% |
|
|
3.8% |
|
|
3.0% |
|
|
2.9% |
|
|
2.8% |
|
|
2.7% |
|
|
2.2% |
|
|
2.1% |
|
|
1.9% |
|
|
1.8% |
|
|
1.8% |
|
|
1.7% |
|
|
1.6% |
|
|
1.4% |
|
|
1.3% |
|
|
1.2% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
| Windows 7 |
36.7% |
|
| Windows 10 |
35.4% |
|
| Windows XP |
10.1% |
|
| Windows 8.1 |
9.6% |
|
| Windows Vista |
6.9% |
|
| Windows 8 |
1.2% |
|
| Windows Server 2008 R2 |
0.1% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00100697 |
| Name |
Size of data |
MD5 |
| .text |
1208832 |
735f1146f3bef9e5cf57052f734fa994 |
| .rdata |
282624 |
8c2e7dfcb82d782aad21d26e3d95676d |
| .data |
24576 |
b9c68c36b6be3ebe83ec5b0633690ec0 |
| .rsrc |
312320 |
eee6513ba1f9973248beb85f48116b4c |
| .reloc |
142848 |
c69fb14d636fcad5d0d5b270cbceeb4e |
