How to remove offer.exe

offer.exe

The module offer.exe has been detected as PUP.MalwareCrusher

offer.exe
Remove offer.exe

File Details

Product Name:

Malware Crusher

Company Name:

malwarecrusher.com

MD5: c6dcd03e31bf197f0e4f35f65b8f4a7f
Size: 4 MB
First Published: 2018-08-06 10:14:29 (6 years ago)
Latest Published: 2018-11-09 07:08:59 (5 years ago)
Status: PUP.MalwareCrusher (on last analysis)
Analysis Date: 2018-11-09 07:08:59 (5 years ago)

Overview

Signed By: Malware Crusher Inc
Status: Valid

Common Places:

%commonappdata%\advanced speedup 2018 for desktop-b3pppdp
%commonappdata%\win - speedup-2018 for hp-compaq6720s
%commonappdata%\win ~speed~up2018 for joie
%commonappdata%\win -speedup-2018 for desktop-ai0ccpk
%commonappdata%\win ~speed ~up2018 for yasser
%commonappdata%\auto~ speed~up~ 2018 for desktop-6q08p3e
%commonappdata%\win~ speedup~ 2018 for machaba_pc
%commonappdata%\win~speedup2018 for lj6ufd9g0pq9w1r
%commonappdata%\win ~speed up~2018 for msdn-1704061233
%commonappdata%\win~speedup2018 for desktop-p0r7q70

File Names:

mcrsetup.exe
offer.exe

Geography:

28.6%
19.0%
14.3%
4.8%
4.8%
4.8%
4.8%
4.8%
4.8%
4.8%
4.8%

OS Version:

Windows 10 76.2%
Windows 7 14.3%
Windows 8.1 4.8%
Windows 8 4.8%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000113bc

PE Sections:

Name Size of data MD5
.text 61952 3a126e478661f20816f9d9285615f98e
.itext 3072 ba48b9b17b3dd8b92da3bd93f20ddb34
.data 3584 d7fd5f4b562d7961758f3d6a8c834fd0
.bss 0 00000000000000000000000000000000
.idata 3584 93d91a2b90e60bd758fc0c4908856ae1
.tls 0 00000000000000000000000000000000
.rdata 512 3dffc444ccc131c9dcee18db49ee6403
.rsrc 222720 0fab38c4bb0bdb12e9c9ea7f5ccfe2be

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for offer.exe
copyright for information about offer.exe