How to remove chrome_child.dll
- File Details
- Overview
- Analysis
chrome_child.dll
The module chrome_child.dll has been detected as PUP.MailRu
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
7efbc85e30e93af02390d761c52b5129 |
| Size: |
49 MB |
| First Published: |
2017-05-21 10:03:15 (7 years ago) |
| Latest Published: |
2019-06-15 11:35:16 (5 years ago) |
| Status: |
PUP.MailRu (on last analysis) |
|
| Analysis Date: |
2019-06-15 11:35:16 (5 years ago) |
Overview
| %localappdata%\amigo\temp\source5992_15530\chrome-bin\56.0.2924.180 |
| %localappdata%\amigo\application\56.0.2924.180 |
| %sysdrive%\adwcleaner\quarantine\files\strtgwcgeedmprtvnwvquhwpcxwazacv\application\56.0.2924.180 |
| %sysdrive%\adwcleaner\quarantine\files\djsiikotrfxdjnxqfhqznouhmsjxixwj\application\56.0.2924.180 |
| %sysdrive%\adwcleaner\quarantine\files\tlrbgvupvfowqpgkuvqvhrwivhhxnvvd\application\56.0.2924.180 |
| %sysdrive%\adwcleaner\quarantine\files\pqpanidhlcdavlguvtlvntcwqqgurkox\application\56.0.2924.180 |
| %localappdata%\amigo\temp\source2696_12491\chrome-bin\56.0.2924.180 |
| %sysdrive%\adwcleaner\quarantine\files\agqivjkwuvnnbuffzdewequvaiimhoks\application\56.0.2924.180 |
| %sysdrive%\adwcleaner\quarantine\files\qzzkbekmakuqclaekqsvjrmsncuwehbe\application\56.0.2924.180 |
| %localappdata%\amigo\temp\source4852_18977\chrome-bin\56.0.2924.180 |
|
34.6% |
|
|
24.4% |
|
|
5.5% |
|
|
5.5% |
|
|
4.7% |
|
|
3.1% |
|
|
3.1% |
|
|
3.1% |
|
|
2.4% |
|
|
2.4% |
|
|
1.6% |
|
|
1.6% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
| Windows 10 |
57.5% |
|
| Windows 7 |
29.9% |
|
| Windows 8.1 |
8.7% |
|
| Windows 8 |
3.9% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x021b9150 |
| Name |
Size of data |
MD5 |
| .text |
41091072 |
4556f384271c3320c99de6100fa593ec |
| .rdata |
8732672 |
57b917678c289459a53a2b15a9bafb70 |
| .data |
463872 |
c582993bf30f0a3eff594d2656e27c82 |
| .tls |
512 |
edda25907019e5cc74c177f6952e5e4b |
| .rodata |
7168 |
7f5b23d2ad240e179e5a9dcc6f9aafc9 |
| .gfids |
2560 |
44450dac4fc071800d7eab738a4c5440 |
| _RDATA |
512 |
541ae312af8f5981a726b33a1eae1f6e |
| .rsrc |
52736 |
7d328f68d61f6cf5109293dddda9cc19 |
| .reloc |
1607168 |
5ad0aeb1b419c7720b81853632455935 |
