How to remove OCSetupHlp.dll
- File Details
- Overview
- Analysis
OCSetupHlp.dll
The module OCSetupHlp.dll has been detected as Adware.OpenCandy
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
083807da406dc4b67f3555bbfa397e37 |
| Size: |
835 KB |
| First Published: |
2017-08-09 19:06:05 (6 years ago) |
| Latest Published: |
2020-07-09 21:12:32 (3 years ago) |
| Status: |
Adware.OpenCandy (on last analysis) |
|
| Analysis Date: |
2020-07-09 21:12:32 (3 years ago) |
Overview
| %temp%\hyd3e9c.tmp.1438360206\hta\3rdparty |
| %temp%\hyd82f7.tmp.1440665046\hta\3rdparty |
| %sysdrive%\$recycle.bin\s-1-5-21-713505552-1699677106-438237388-1000\$r1v4j95.1438800799\hta |
| %sysdrive%\$recycle.bin\s-1-5-21-713505552-1699677106-438237388-1000\$r1v4j95.1438800799\hta\install.1438800799.zip |
| %sysdrive%\$recycle.bin\s-1-5-21-713505552-1699677106-438237388-1000\$r9fxhz3.1438801078\hta\install.1438801078.zip |
| %temp%\hyd1356.tmp.1438855627\hta |
| %temp%\hyd2e51.tmp.1438277364\hta |
| %temp%\hyd24df.tmp.1439802436\hta\install.1439802436.zip |
| %temp%\hydec23.tmp.1439802422\hta\install.1439802422.zip |
| %temp%\hydec23.tmp.1439802422\hta |
|
25.0% |
|
|
25.0% |
|
|
16.7% |
|
|
8.3% |
|
|
8.3% |
|
|
8.3% |
|
|
8.3% |
|
| Windows 7 |
81.3% |
|
| Windows 8.1 |
12.5% |
|
| Windows 10 |
6.3% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x0005ecdc |
| Name |
Size of data |
MD5 |
| .text |
528896 |
448da18b705ce99960ce222b47f14b83 |
| .rdata |
237056 |
4a4d6b47bf2eac0f4cba6758fb25d498 |
| .data |
11264 |
abf5f566f25935e7a5d6fd2e5e6a74cb |
| .rsrc |
29696 |
00152d0af4aeb64a5b274f80c48c21b2 |
| .reloc |
40448 |
4034ff872df924038ec1b94eca92be2b |
