home

6yxi28ry2tdy.exe

GOMPLAYER

Inet produkt

The executable 6yxi28ry2tdy.exe has been detected as malware by 1 anti-virus scanner.
Publisher:
Gretech Corp.  (signed by Inet produkt)

Product:
GOMPLAYER

Description:
GOM PLAYER

Version:
2, 1, 34, 5075

MD5:
e3c6a80909ddde8764829883763d96c1

SHA-1:
317d5fa83ddebca74d58cbb55af43f7d0ab3ce21

SHA-256:
6dd1520a57c7b737cfa4d698861ac44638d5ad868b1200a65d3136605a964077

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
11/15/2024 5:40:08 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.3.2.16

File size:
863.5 KB (884,224 bytes)

Product version:
2, 1, 34, 5075

Copyright:
Copyright(C) 2003-2011 Gretech Corp. All rights reserved.

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\6yxi28ry2tdy.exe

Digital Signature
Signed by:
Inet produkt

Authority:
COMODO CA Limited

Valid from:
10/27/2015 2:00:00 AM

Valid to:
10/27/2016 2:59:59 AM

Subject:
CN=Inet produkt, O=Inet produkt, STREET="44, kv.20, Pr-Kt Lenina", L=Saransk, S=The Republic of Mordovia, PostalCode=430003, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00EA94EC5CBA3B7367DD60F5F2C486FF6A

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x8B8B0

Entry point:
52, 51, 89, FF, 75, 02, 37, 90, 01, FE, E8, 39, 63, F7, FF, 4E, 90, 58, 59, EB, 08, 90, 12, 77, 04, FC, 90, FC, 90, 68, 28, B9, 48, 00, E9, 90, 06, 00, 00, 0F, 85, DE, E8, 00, 00, 8B, 45, F8, 66, 3B, C3, 03, 45, F0, 81, FD, 31, 1E, EE, 13, 8D, 40, 12, 66, 81, 38, 8B, 75, E9, 29, E5, FF, FF, 0F, 8D, 55, E7, 00, 00, 8D, 14, 02, F8, 01, 3D, 73, 10, 49, 00, E9, 3D, E7, 00, 00, 89, 1D, C1, 10, 49, 00, 66, 83, 3D, D1, 10, 49, 00, 00, E9, 09, EB, FF, FF, A7, E8, E1, 56, F7, FF, C3, 50, 8B, 45, F0, E9, 2E, F9, FF...
 
[+]

Code size:
581.5 KB (595,456 bytes)

Remove 6yxi28ry2tdy.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.