How to remove GOM64.EXE
GOM64.EXE
The module GOM64.EXE has been detected as Trojan.Heur!
File Details
| Product Name: | GOM Player Plus |
| Company Name: | GOM & Company |
| MD5: | c21c4f0f58af2c7feee6637faf8ef0a7 |
| Size: | 13 MB |
| First Published: | 2018-10-10 22:47:31 (6 years ago) |
| Latest Published: | 2018-11-15 20:10:42 (5 years ago) |
| Status: | Trojan.Heur! (on last analysis) | |
| Analysis Date: | 2018-11-15 20:10:42 (5 years ago) |
Overview
| Signed By: | GRETECH |
| Status: | Invalid (digital signature could be stolen or file could be patched) |
Common Places:
| %programfiles%\gretech |
| %desktop%\gmplyrpls.2.3.33.5294.wt\gmplyrpls.2.3.33.5294.wt\crack |
Geography:
| 57.1% | ||
| 28.6% | ||
| 7.1% | ||
| 7.1% |
OS Version:
| Windows 10 | 71.4% | |
| Windows 7 | 28.6% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 64 |
| Image Base: | 0x0000000140000000 |
| Entry Address: | 0x005c9890 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 6803456 | db750c7ca2209d63f425b7a13bff264e |
| RT_CODE | 2560 | a5464b4862edf5afc327cdb27ad95db7 |
| .rdata | 2575872 | a9509d132e08e717d1f394db9fb19d56 |
| .data | 146432 | 8d1e8d93edf18358259a196be1197ee2 |
| .pdata | 333824 | 745f2889e8e4b584a2058c2a477fe673 |
| .GOMSH | 512 | bf619eac0cdf3f68d496ea9344137e8b |
| .rsrc | 4263936 | fb30d6232944cf91beffd6402667298f |
| .reloc | 122880 | 48e0eae6b7197734347cc97ae1e1b0ea |
More information:
Download GridinSoft
Anti-Malware - Removal tool for GOM64.EXE
