How to remove SearchProtectINT.exe
- File Details
- Overview
- Analysis
SearchProtectINT.exe
The module SearchProtectINT.exe has been detected as Adware.Conduit
File Details
| Company Name: |
|
| MD5: |
9fb9d49c2db7edd1084ab765d619f5c6 |
| Size: |
64 KB |
| First Published: |
2017-05-22 10:17:31 (6 years ago) |
| Latest Published: |
2024-04-01 23:07:08 (3 weeks ago) |
| Status: |
Adware.Conduit (on last analysis) |
|
| Analysis Date: |
2024-04-01 23:07:08 (3 weeks ago) |
Overview
| %appdata%\opencandy\95b61785da704995befbfb6462f0d989 |
| %appdata%\rheng\384a55c0483042a0a81bac7bdb55e0d3 |
| %appdata%\opencandy\227c58d0fb89444c91d61b136e03b32c |
| %localappdata%\temp |
| %temp%\conduitsp |
| %appdata%\opencandy\e289a51adfbc4d3c95a29b335448e13a |
| %appdata%\rheng\a85733e3683543eab546385504d68262 |
| %appdata%\rheng\e7831bf5f73a47e68ea6600896487eb9 |
| %appdata%\opencandy\cbdc8f7d2aa44d408a3d311f327cb8d7 |
| %appdata%\opencandy\2d59d35c0a8746f7ba9b1d3037cf348f |
| sp-downloader.exe |
| SearchProtectINT.exe |
| air546B.exe |
| sp-downloaderB[1].exe |
| sp-downloader[1].exe |
| utt9C31.tmp.exe |
| sp_downloader.exe |
| sp-downloader.exe.vir |
| searchprotect_2111-1a12a8ce.exe |
| utt311.tmp.exe |
| search-protect_installer.exe |
| sp-downloaderB.exe |
|
25.2% |
|
|
22.3% |
|
|
4.9% |
|
|
3.9% |
|
|
3.9% |
|
|
3.9% |
|
|
2.9% |
|
|
2.9% |
|
|
2.9% |
|
|
2.9% |
|
|
2.9% |
|
|
2.9% |
|
|
2.9% |
|
|
2.9% |
|
|
1.9% |
|
|
1.9% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
| Windows 7 |
52.4% |
|
| Windows 10 |
35.9% |
|
| Windows Vista |
4.9% |
|
| Windows 8.1 |
3.9% |
|
| Windows XP |
1.9% |
|
| Windows 8 |
1.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0000354b |
| Name |
Size of data |
MD5 |
| .text |
25600 |
3291075913c14a1799655a261fb21cca |
| .rdata |
6656 |
170563e94de7ebfd6e622a164ce38c8a |
| .data |
512 |
23d69b1e3a55dee07701198b7650a06b |
| .ndata |
0 |
00000000000000000000000000000000 |
| .rsrc |
3584 |
71f15a6f0c39764bfbadcfecfb66019f |
