How to remove dup.exe
dup.exe
The module dup.exe has been detected as Adware.ELEX
File Details
| Product Name: | DUP |
| Company Name: | Taiwan Shui Mu Chih Ching Technology Limited. |
| MD5: | 77909f730d8b052ac1ba3045ee76d36f |
| Size: | 255 KB |
| First Published: | 2017-05-28 14:06:39 (7 years ago) |
| Latest Published: | 2020-06-15 15:22:22 (4 years ago) |
| Status: | Adware.ELEX (on last analysis) | |
| Analysis Date: | 2020-06-15 15:22:22 (4 years ago) |
Overview
| Signed By: | Taiwan Shui Mu Chih Ching Technology Limited |
| Status: | Valid |
Common Places:
| %localappdata%\temp{671bcfb8-da91-4e40-8f21-4e450ea60ff9}\omigazip_patch |
| %programfiles%\winzipper |
| %localappdata%\temp{02067b7d-4349-42e7-afc9-7b0c1e789077}\omigazip_patch |
| %localappdata%\temp{c77b7737-b737-43af-85b0-c6070dfbb73f}\omigazip_patch |
| %localappdata%\temp{bf60d214-b25c-4321-af52-8f5e71489622}\omigazip_patch |
| %localappdata%\temp{cb6e1968-b4f5-4183-a708-f9fbb2c50f23}\omigazip_patch |
| %localappdata%\temp{dffc802c-a421-48d1-a2d3-a3bf8295c2b3}\omigazip_patch |
| %localappdata%\temp{60927398-ec35-43b0-82f1-2536aba4f2ba} |
| %temp%\{30fdee37-1949-4917-8d38-6eeaa86eff68}\{b7829c5a-b099-40e2-8c30-72d4299697e8} |
| %temp%\{877708ae-3364-4760-9f9e-0cefe5d78c7a}\{e0f5a814-ac13-4ae1-a630-3d60d0a0a33b} |
Geography:
| 39.1% | ||
| 8.7% | ||
| 8.7% | ||
| 8.7% | ||
| 8.7% | ||
| 4.3% | ||
| 4.3% | ||
| 4.3% | ||
| 4.3% | ||
| 4.3% | ||
| 4.3% |
OS Version:
| Windows 7 | 78.3% | |
| Windows 8.1 | 8.7% | |
| Windows XP | 4.3% | |
| Windows 8 | 4.3% | |
| Windows 10 | 4.3% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x00024652 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 163328 | 186bb1a0da33006b1cadffc44a632e1e |
| .rdata | 60928 | f376b37d50c15099d813d1e5e4cf1f59 |
| .data | 5632 | 28889677d963c2c1da0f0eec89710741 |
| .tls | 512 | bf619eac0cdf3f68d496ea9344137e8b |
| .rsrc | 1536 | c2d4646b073e18e3852295671be4ac00 |
| .reloc | 23040 | 5144285b9c55d200b7a40544440b1693 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for dup.exe
