How to remove npsafe_surfing.dll
- File Details
- Overview
- Analysis
npsafe_surfing.dll
The module npsafe_surfing.dll has been detected as Adware.Toolbar
File Details
| Product Name: |
|
| MD5: |
727f62a6c44116f0fdd028064b5344e3 |
| Size: |
180 KB |
| First Published: |
2017-05-28 16:04:40 (7 years ago) |
| Latest Published: |
2018-09-20 13:10:46 (6 years ago) |
| Status: |
Adware.Toolbar (on last analysis) |
|
| Analysis Date: |
2018-09-20 13:10:46 (6 years ago) |
| %localappdata%\bromium\user data\default\extensions\kcknbenjnkkjknphmnidanjifbgphjke\14.18_0\npapi |
| %localappdata%\yandex\internet\user data\default\extensions\kcknbenjnkkjknphmnidanjifbgphjke\14.18_0\npapi |
| %appdata%\opera software\opera next\extensions\kcknbenjnkkjknphmnidanjifbgphjke\14.18_0\npapi |
| %localappdata%\playfree browser\user data\default\extensions\kcknbenjnkkjknphmnidanjifbgphjke\14.18_0\npapi |
| %localappdata%\maplestudio\chromeplus\user data\default\extensions\kcknbenjnkkjknphmnidanjifbgphjke\14.18_0\npapi |
| %localappdata%\comodo\dragon\user data\default\extensions\kcknbenjnkkjknphmnidanjifbgphjke\14.18_0\npapi |
| %localappdata%\nichrome\user data\default\extensions\kcknbenjnkkjknphmnidanjifbgphjke\14.18_0\npapi |
| %localappdata%\xpom\user data\default\extensions\kcknbenjnkkjknphmnidanjifbgphjke\14.18_0\npapi |
| %localappdata%\comodo\dragon\user data\default\extensions\kcknbenjnkkjknphmnidanjifbgphjke\14.18_0 |
| %appdata%\opera software\opera next\extensions\kcknbenjnkkjknphmnidanjifbgphjke\14.18_0 |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x0000fe35 |
| Name |
Size of data |
MD5 |
| .text |
121344 |
e4efaa6439a7d5c7396f94ff3972b71f |
| .rdata |
46592 |
9512404d5275fa7dba05072d1f86f049 |
| .data |
5632 |
c74c3e93952a8dfb502191fa81d8af04 |
| .rsrc |
1536 |
bc4d614f5e05d13be40bf83f317b97f3 |
| .reloc |
8704 |
a0caf8605b6f0652afdb9ea50f606928 |
