How to remove ~GLH000b.TMP
- File Details
- Overview
- Analysis
~GLH000b.TMP
The module ~GLH000b.TMP has been detected as Adware.Crossrider
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
6354ff478451dc33755ffaea5163eabb |
| Size: |
1 MB |
| First Published: |
2017-06-23 04:01:39 (7 years ago) |
| Latest Published: |
2020-07-03 22:13:01 (4 years ago) |
| Status: |
Adware.Crossrider (on last analysis) |
|
| Analysis Date: |
2020-07-03 22:13:01 (4 years ago) |
Overview
| %sysdrive%\progra~1\youtub~1 |
| %programfiles%\youtube accelerator |
| %sysdrive%\progra~2\youtub~2 |
| %sysdrive%\progra~2\youtub~1 |
| %programfiles% |
| %temp% |
| %sysdrive%\progra~1 |
| %temp%\sainst |
| %sysdrive%\progra~2 |
| %sysdrive%\windows.old.001\users\dell\appdata\local\temp\sainst |
| YouTubeAcceleratorService.exe |
| ~GLH000b.TMP |
|
26.3% |
|
|
10.5% |
|
|
7.9% |
|
|
7.9% |
|
|
7.9% |
|
|
5.3% |
|
|
5.3% |
|
|
5.3% |
|
|
5.3% |
|
|
5.3% |
|
|
2.6% |
|
|
2.6% |
|
|
2.6% |
|
|
2.6% |
|
|
2.6% |
|
| Windows 7 |
61.5% |
|
| Windows 8 |
17.9% |
|
| Windows 8.1 |
12.8% |
|
| Windows 10 |
5.1% |
|
| Windows Vista |
2.6% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000b4c0f |
| Name |
Size of data |
MD5 |
| .text |
0 |
00000000000000000000000000000000 |
| .rdata |
0 |
00000000000000000000000000000000 |
| .data |
0 |
00000000000000000000000000000000 |
| .text1 |
671744 |
8532ede3be98ab556d9ccb2924d7e97f |
| .adata |
53248 |
938d6d97628275a512e07c66be5ccecf |
| .data1 |
118784 |
32bbfad649c7c2a357aaa38ec3e80050 |
| .pdata |
634880 |
d820bfa6cccf0e610dc6aa4bc2e6e813 |
| .rsrc |
20480 |
7ad6401501a8c9eeef71dd58a94efbcb |
