How to remove gpchandller.exe
- File Details
- Overview
- Analysis
gpchandller.exe
The module gpchandller.exe has been detected as PUP.Gen
File Details
Product Name: |
|
MD5: |
da35f6f56b2e578224ac4fbc406ea09c |
Size: |
179 KB |
First Published: |
2017-06-06 17:10:29 (6 years ago) |
Latest Published: |
2020-08-22 16:24:30 (3 years ago) |
Status: |
PUP.Gen (on last analysis) |
|
Analysis Date: |
2020-08-22 16:24:30 (3 years ago) |
%programfiles%\pchandller |
%sysdrive%\adwcleaner\quarantine\files\bgltlossduursscpozydpjrpefhrycec |
%sysdrive%\$recycle.bin\s-1-5-21-399887627-3903759977-3487344743-1001\$r2a0cjm |
%sysdrive%\windows.old\$recycle.bin\s-1-5-21-2421614022-2086232156-1635106484-1000 |
%sysdrive%\adwcleaner\quarantine\oygxlsxptl |
%sysdrive%\$recycle.bin\s-1-5-21-1289371550-655932122-1477237084-1000\$rdt1wmc |
%sysdrive%\$recycle.bin\s-1-5-21-364449874-1321669773-3533379543-1000\$rzxb52g |
%programfiles% |
%sysdrive%\adwcleaner\quarantine |
%sysdrive%\adwcleaner\quarantine\files |
pchandller.exe |
gpchandller.exe |
$RY168WR.exe |
|
33.1% |
|
|
26.9% |
|
|
7.2% |
|
|
5.0% |
|
|
3.1% |
|
|
2.7% |
|
|
1.4% |
|
|
1.4% |
|
|
1.2% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
0.8% |
|
|
0.8% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
Windows 7 |
48.2% |
|
Windows 10 |
32.9% |
|
Windows 8.1 |
10.4% |
|
Windows XP |
6.3% |
|
Windows 8 |
2.0% |
|
Windows Vista |
0.2% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x0001d7d6 |
MVID: |
2d4c7350-4e2c-48a5-ada8-fd409ca043ba |
Typelib ID: |
1b95ac09-9d51-4659-8146-b99206d5c59d |
Name |
Size of data |
MD5 |
.text |
112640 |
763dd03f44d96d4c5f34d5cd46568628 |
.rsrc |
69632 |
185c1a92e68a63e2255859d429ead0d6 |
.reloc |
512 |
f331272102dc44027ce9855784a8e0aa |