How to remove awesomehp.exe
- File Details
- Overview
- Analysis
awesomehp.exe
The module awesomehp.exe has been detected as Adware.ELEX
File Details
Product Name: |
|
Company Name: |
|
MD5: |
2eee15b1927eadff45013e94b0cb0d94 |
Size: |
128 KB |
First Published: |
2017-05-21 03:01:53 (8 years ago) |
Latest Published: |
2024-01-10 23:52:13 (2 years ago) |
Status: |
Adware.ELEX (on last analysis) |
|
Analysis Date: |
2024-01-10 23:52:13 (2 years ago) |
Overview
%windir%\temp\oua8207.tmp\secondu71 |
%windir%\temp\hpaf85.tmp |
%windir%\temp\hp19f6.tmp |
%windir%\temp\hpa61c.tmp |
%programfiles%\59146aba_cacayima\pack\2 |
%system%\_twm |
%windir%\temp\hp4442.tmp |
%temp%\hp71a9.tmp |
%temp%\hp8289.tmp |
%windir%\temp\hp4089.tmp |
QQBrowser.exe |
awesomehp.exe |
chff.exe |
A0005713.exe |
chkk.exe |
chpp.exe |
aartemis.exe |
A0146811.exe |
sflg.exe |
nationzoom.exe |
Vietnam |
17.5% |
|
Turkey |
11.2% |
|
Taiwan |
10.4% |
|
Hong Kong |
8.0% |
|
Indonesia |
6.1% |
|
Thailand |
5.4% |
|
Germany |
4.0% |
|
France |
4.0% |
|
Poland |
3.9% |
|
Brazil |
3.6% |
|
Russia |
3.5% |
|
South Korea |
2.9% |
|
Italy |
2.1% |
|
Spain |
1.7% |
|
Saudi Arabia |
1.4% |
|
Czech Republic |
1.3% |
|
Australia |
1.2% |
|
Romania |
1.1% |
|
India |
1.0% |
|
Ukraine |
0.9% |
|
Mexico |
0.8% |
|
Slovakia |
0.8% |
|
Bulgaria |
0.7% |
|
South Africa |
0.7% |
|
Chile |
0.7% |
|
Peru |
0.5% |
|
Switzerland |
0.4% |
|
Argentina |
0.4% |
|
Azerbaijan |
0.4% |
|
Hungary |
0.3% |
|
Serbia |
0.3% |
|
United Arab Emirates |
0.2% |
|
Pakistan |
0.2% |
|
Egypt |
0.2% |
|
Colombia |
0.2% |
|
Jordan |
0.2% |
|
Austria |
0.1% |
|
Singapore |
0.1% |
|
Finland |
0.1% |
|
Kuwait |
0.1% |
|
Morocco |
0.1% |
|
Portugal |
0.1% |
|
Japan |
0.1% |
|
Netherlands |
0.1% |
|
Ireland |
0.1% |
|
Belgium |
0.1% |
|
Mauritania |
0.1% |
|
Oman |
0.1% |
|
Malaysia |
0.1% |
|
Philippines |
0.1% |
|
Slovenia |
0.1% |
|
China |
0.1% |
|
Ecuador |
0.1% |
|
Iceland |
0.1% |
|
Windows 7 |
50.5% |
|
Windows 10 |
31.9% |
|
Windows 8.1 |
10.8% |
|
Windows XP |
4.7% |
|
Windows 8 |
1.7% |
|
Windows Vista |
0.2% |
|
Windows Embedded 8.1 |
0.1% |
|
Windows Server 2012 R2 |
0.1% |
|
Windows Server 2008 R2 |
0.1% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x50bc0000 |
Entry Address: |
0x00001996 |
Name |
Size of data |
MD5 |
.text |
5632 |
80dd89c2edbd1c73ceebc7e2aab9fd2c |
.rdata |
3072 |
336a9b0b677bb6029609f002100d52ce |
.data |
512 |
6ccd07d08967a33e75cc730e5a6f5de3 |
.rsrc |
112128 |
82d5b7b4360bb63ee9a6a2b220104716 |
.reloc |
1536 |
7b60ab8368cb8627c7edc0e8d51d2e17 |