How to remove wpm.exe
wpm.exe
The module wpm.exe has been detected as Adware.ELEX
File Details
| Product Name: | WFini |
| Company Name: | WFini LIMITED |
| MD5: | 42a8d885d6ffe6a3f2950a595cbcd5bb |
| Size: | 205 KB |
| First Published: | 2017-05-28 04:14:00 (7 years ago) |
| Latest Published: | 2018-08-29 08:11:57 (6 years ago) |
| Status: | Adware.ELEX (on last analysis) | |
| Analysis Date: | 2018-08-29 08:11:57 (6 years ago) |
Overview
| Signed By: | Junyan Li |
| Status: | Valid |
Common Places:
| %allusersprofile%\\application data\dwinpd |
| %allusersprofile%\\application data\uwinpu |
| %programfiles%\{837be3b6-6cb0-4de5-b0a0-c4767e53e3de} |
| %programfiles%\{24730078-ebde-4625-9915-486b13d4a63c} |
| %programfiles%\{72184f22-240f-44e6-b37b-63ecf39841e7} |
| %programfiles%\{641f3909-837c-4675-ac16-761080796ba4} |
| %programfiles%\{e9ebddd5-2fef-42b8-9905-60ff87297923} |
| %programfiles%\hohobnd\347aa0a |
| %programfiles%\hohobnd |
| %programfiles%\{feb7bbc2-4b58-4783-b106-1ebce546c681} |
File Names:
| WFini.exe |
| wpm.exe |
| A0270611.exe |
Geography:
| 32.0% | ||
| 28.0% | ||
| 13.0% | ||
| 8.0% | ||
| 5.0% | ||
| 5.0% | ||
| 2.0% | ||
| 2.0% | ||
| 1.0% | ||
| 1.0% | ||
| 1.0% | ||
| 1.0% | ||
| 1.0% |
OS Version:
| Windows 7 | 73.0% | |
| Windows XP | 10.0% | |
| Windows 10 | 9.0% | |
| Windows 8.1 | 8.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x0000fa54 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 141824 | 6a4c896dd1dbab6d356036f7309bafd6 |
| .rdata | 37888 | 5b27dfa4c2bffd95bde6a43611021f60 |
| .data | 12288 | 781a3e7d8ba73a7a4c4c8008951af308 |
| .rsrc | 11264 | 13c519aae9f8fdeca4fd9528c2a33f9d |
More information:
Download GridinSoft
Anti-Malware - Removal tool for wpm.exe
