How to remove gplyra-uninst.exe
- File Details
- Overview
- Analysis
gplyra-uninst.exe
The module gplyra-uninst.exe has been detected as Risk.CoinMiner
File Details
| Product Name: |
|
| MD5: |
d00fbca15b0b9468bfa97b49bb49bf2a |
| Size: |
69 KB |
| First Published: |
2017-05-21 04:03:18 (7 years ago) |
| Latest Published: |
2020-08-26 00:54:03 (4 years ago) |
| Status: |
Risk.CoinMiner (on last analysis) |
|
| Analysis Date: |
2020-08-26 00:54:03 (4 years ago) |
| %appdata%\gplyra |
| %sysdrive%\windows.old\users\александр\appdata\roaming\gplyra |
| %sysdrive%\adwcleaner\quarantine\files\quohncxpjedrmpijhomcpvuajmsyhtfj |
| %sysdrive%\quarantine_mzk\folders\20170510수11145606\gplyra.11.19.18.27 |
| %appdata% |
| %sysdrive%\adwcleaner\quarantine\files |
| %appdata% |
| %appdata% |
|
20.1% |
|
|
10.8% |
|
|
10.5% |
|
|
7.3% |
|
|
6.4% |
|
|
5.7% |
|
|
4.8% |
|
|
3.2% |
|
|
2.5% |
|
|
2.2% |
|
|
1.9% |
|
|
1.9% |
|
|
1.6% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
| Windows 10 |
54.4% |
|
| Windows 7 |
33.9% |
|
| Windows 8.1 |
10.8% |
|
| Windows 8 |
0.9% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000032e1 |
| Name |
Size of data |
MD5 |
| .text |
25088 |
ba5c07578c80a0e82502af5921ee3121 |
| .rdata |
5120 |
2f18aef2b3d3566d27925ec3892c4656 |
| .data |
1536 |
dbb4ca6c537274dd93073b558c78c92c |
| .ndata |
0 |
00000000000000000000000000000000 |
| .rsrc |
16896 |
3f25ee3a31169d51e1eb7d795c003fe9 |
