How to remove WFini.exe
WFini.exe
The module WFini.exe has been detected as Adware.ELEX
File Details
| Product Name: | WFini |
| Company Name: | WFini LIMITED |
| MD5: | 846972f21545f3599523da62ced78d4b |
| Size: | 580 KB |
| First Published: | 2017-05-28 07:03:33 (7 years ago) |
| Latest Published: | 2018-06-11 20:14:20 (6 years ago) |
| Status: | Adware.ELEX (on last analysis) | |
| Analysis Date: | 2018-06-11 20:14:20 (6 years ago) |
Overview
| Signed By: | Junyan Li |
| Status: | Valid |
Common Places:
| %windir%\temp\ista78b.tmp\tools |
| %windir%\temp\ist6672.tmp\tools |
| %windir%\temp\istae4e.tmp\tools |
| %windir%\temp\ist4045.tmp\tools |
| %commonappdata%\ewinpe |
| %commonappdata% |
| %windir%\temp\istaf14.tmp |
| %windir%\temp\ist1c97.tmp |
File Names:
| wpm.exe |
| WFini.exe |
Geography:
| 23.1% | ||
| 23.1% | ||
| 15.4% | ||
| 15.4% | ||
| 7.7% | ||
| 7.7% | ||
| 7.7% |
OS Version:
| Windows 8.1 | 38.5% | |
| Windows 7 | 38.5% | |
| Windows 8 | 15.4% | |
| Windows 10 | 7.7% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x00054f1d |
PE Sections:
| Name | Size of data | MD5 |
| .text | 468992 | 191dce535367758999e0f59a50de7dca |
| .rdata | 94208 | 9869d746be7d7b48796a15b5f3ab3125 |
| .data | 13312 | cb9e9656365a8c76a07544d52e2acb50 |
| .rsrc | 11264 | 764cc52b17e4ecef58634c8f6479b2f6 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for WFini.exe
