pthreadGC2.DLL

POSIX Threads for Windows LPGL

Open Source Software community LGPL

Publisher:
Open Source Software community LGPL

Product:
POSIX Threads for Windows LPGL

Description:
GNU C x86 (mingw32)

Version:
2, 9, 1, 0

MD5:
e07ede862772fa0cd42a34d901e32149

SHA-1:
03e8ba165835e102f3d653d1a1a759067d4a1823

SHA-256:
f48defc6b38c69236e0239989011781f17384d80cf44e42b537e31425bb938ec

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/15/2024 7:29:35 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.HfsAutoB
1.3.0.4613

File size:
116.9 KB (119,704 bytes)

Product version:
2, 9, 1, 0

Copyright:
Copyright (C) Project contributors 2012

Original file name:
pthreadGC2.DLL

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\roaming\adobe\crsscmgr\pthreadgc2.dll

File PE Metadata
Compilation timestamp:
8/22/2013 1:34:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.23

CTPH (ssdeep):
3072:qD2mS2CEIaTbLDfIKs0AQD0yG0+iH/plhp0TNItfMftfMs0R2aF:qD2R2CEIebLLIKs0AQD0yG0+iH/pKMsy

Entry address:
0x1060

Entry point:
55, 89, E5, 57, 56, 53, 83, EC, 1C, 8B, 5D, 0C, 8B, 75, 08, 8B, 7D, 10, 83, FB, 01, 74, 39, 89, 34, 24, 89, 7C, 24, 08, 89, 5C, 24, 04, E8, 29, 44, 00, 00, 83, EC, 0C, 85, DB, 89, C6, 75, 13, 8B, 15, 04, 20, 49, 62, 31, C0, 85, D2, 74, 07, E8, 5F, FF, FF, FF, 89, F0, 8D, 65, F4, 5B, 5E, 5F, 5D, C2, 0C, 00, 8D, 76, 00, C7, 04, 24, 80, 00, 00, 00, E8, 5C, C3, 00, 00, 85, C0, A3, 04, 20, 49, 62, 74, 5E, C7, 00, 00, 00, 00, 00, A3, 00, 20, 49, 62, A1, A8, F0, 48, 62, 85, C0, 74, 14, 89, 7C, 24, 08, C7, 44, 24...
 
[+]

Entropy:
5.7483

Code size:
50 KB (51,200 bytes)

The file pthreadGC2.DLL has been discovered within the following programs.

Amberlight  by Escape Motions, s.r.o
www.escapemotions.com
About 3% of users remove it
Apple Software Update  by Apple Inc.
With a Windows PC, you can use Apple Software Update for Windows to keep your Apple software up-to-date via the Internet. Apple software includes Safari, iTunes for Windows, Bonjour for Windows, and QuickTime for Windows.
www.apple.com/softwareupdate
21% remove it
About 4% of users remove it
DrivePro Toolbox  by Transcend Information, Inc.
www.transcend-info.com
21% remove it
Flame Painter 3  by Escape Motions, s.r.o
About 3% of users remove it
Flame Painter 3 Pro  by Escape Motions, s.r.o
About 5% of users remove it
mBlock  by Maker Works Technology Co. Ltd.,
www.mblock.cc
About 8% of users remove it
PC Data App  by Adware.BitCoinMiner
The software is a Trojan Bitcoin miner that utilizes the open source CGMiner utility. The Trojan Bitcoin miner is an invasive multiple component malware infection. This is a potentially unwanted program that installs malware on the user's PC using the file start.
79% remove it
STAAR Online Testing Program  by Computerized Assessments and Learning
About 2% of users remove it
Synology Cloud Station  by Synology Inc.
About 1% of users remove it
 
Latest 20 of 20 programs
Powered by Should I Remove It?

The file pthreadGC2.DLL has been seen being distributed by the following 14 URLs.

http://e406148b51.pw/algo/x11/.../pthreadGC2.dll

http://6d1a0563f2.pw/algo/x11/.../pthreadGC2.dll

Scan pthreadGC2.DLL - Powered by Reason Core Security