How to remove TBMessagingHost.exe
- File Details
- Overview
- Analysis
TBMessagingHost.exe
The module TBMessagingHost.exe has been detected as Adware.Gen
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
6b2dc0ed17771cf937b83d40c542ea5d |
| Size: |
1019 KB |
| First Published: |
2017-07-29 15:06:06 (7 years ago) |
| Latest Published: |
2019-08-14 12:53:21 (5 years ago) |
| Status: |
Adware.Gen (on last analysis) |
|
| Analysis Date: |
2019-08-14 12:53:21 (5 years ago) |
Overview
| %localappdata%\nativemessaging\ct3295548\1_0_0_10 |
| %localappdata%\torch\user data\default\extensions\aanjjkgbodmfkdnkkhcjcghgnibdllak\10.26.9.505_0\nativemessaging |
| %chromeprofile%\extensions_backup\kepfgejmidkmoiimkfdjocdjhbcpmlmg\10.26.9.505_0\nativemessaging |
| %localappdata%\nativemessaging\ct3287811 |
| %sysdrive%\shadly-pc\backup set 2014-03-04 002754\backup files 2014-03-04 002754\backup files 2.zip\c\users\shadly\appdata\local\google\chrome\user data\default\extensions\plmlpkfpkijnlijgalnjaacllnjmoamo\10.26.9.505_0 |
| %localappdata%\torch\user data\default\extensions\aanjjkgbodmfkdnkkhcjcghgnibdllak\10.26.9.505_0 |
| %sysdrive%\cafrica\j\bobo\backup set 2014-03-02 190025\backup files 2014-03-02 190025\backup files 10.zip\c\users\äöä\appdata\local\google\chrome\user data\default\extensions\pielejjfbdmjdfiimgiljjpmlpalgoeg\10.26.9.505_0 |
| %sysdrive%\cafrica\j\bobo\backup set 2014-03-02 190025\backup files 2014-03-02 190025\backup files 10.zip\c\users\äöä\appdata\local\google\chrome\user data\default\extensions\jfjhiccppafcjicfalobggnophliocpp\10.26.9.505_0 |
| %sysdrive%\cafrica\j\bobo\backup set 2014-03-02 190025\backup files 2014-03-02 190025\backup files 10.zip\c\users\äöä\appdata\local\google\chrome\user data\default\extensions\kgbcbdejncdpahgapnmkjimfmlipdgdl\10.26.9.505_0 |
| %localappdata%\torch\user data\default\extensions\aanjjkgbodmfkdnkkhcjcghgnibdllak\10.26.9.505_0 |
|
35.0% |
|
|
30.0% |
|
|
15.0% |
|
|
10.0% |
|
|
5.0% |
|
|
5.0% |
|
| Windows 10 |
80.0% |
|
| Windows 7 |
20.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000469a8 |
| Name |
Size of data |
MD5 |
| .text |
725504 |
a9c0363420b5b747ff8a6a0d9d25f817 |
| .rdata |
158208 |
0f8703442b98f7634c2fca3bf48e1786 |
| .data |
48640 |
3dee79b65fc7ec0ac4441f3c34e8ece5 |
| .rsrc |
1536 |
5423434ffaad9fafc26688c0f27e0faa |
| .reloc |
102400 |
98dc5ad654e0658112a44af3cfed8a51 |
