home

youtubelyricsie_x64.dll

Rob W

It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘YouTube Lyrics’. This is installed with YouTube Lyrics by Rob W.
Publisher:
Rob W  (signed and verified)

MD5:
b5a9143c8c42ac154eb341e482d7a51f

SHA-1:
e0d1189657d9d36a11b9e70eb47b8fdac7618c48

SHA-256:
4cb3c220e75dd1ef192e1c68b03a476f7e452c712720bdbe6fa8596984cf137c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 7:07:16 AM UTC  (today)

File size:
189.7 KB (194,288 bytes)

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\Program Files\youtube lyrics\youtubelyricsie_x64.dll

Digital Signature
Signed by:
Rob W

Authority:
Robs CA

Valid from:
2/1/2013 7:29:52 PM

Valid to:
1/1/1940 5:29:59 AM

Subject:
CN=Rob W, E=rob@lekensteyn.nl

Issuer:
CN=Robs CA

Serial number:
4C3096FF0747A9B24BC9937BA50F1221

Registration
CLSID:
{DDE91818-325C-4401-B745-99670323D9FF}

COM registered:
Yes

File PE Metadata
Compilation timestamp:
2/14/2013 4:10:14 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3072:OzllWNFkG1gxbH1atyoSupepL7OlYoxcjq1qpGt8se6GwEPXnbEbDKzbEbhxARQ/:F3kGuxbH1bMepL7OlYoC21Ot6G7fnbEz

Entry address:
0x10A90

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 8B, 03, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 87, FE, FF, FF, CC, FF, 25, 24, 17, 00, 00, 48, 89, 4C, 24, 08, 48, 81, EC, 88, 00, 00, 00, 48, 8D, 0D, 89, DD, 01, 00, FF, 15, 4B, 15, 00, 00, 48, 8B, 05, 74, DE, 01, 00, 48, 89, 44, 24, 58, 45, 33, C0, 48, 8D, 54, 24, 60, 48, 8B, 4C, 24, 58, E8, 03, 04, 00, 00, 48, 89, 44, 24, 50...
 
[+]

Entropy:
6.3974

Code size:
68 KB (69,632 bytes)

Internet Explorer BHO
CLSID:
{DDE91818-325C-4401-B745-99670323D9FF}

CLSID name:
YouTube Lyrics


The file youtubelyricsie_x64.dll has been discovered within the following program.

YouTube Lyrics by Rob W  by Rob W
The software is displayed to users through a co-bundle offer as a way to display lyrics when watching YouTube videos. However, the true purpose is to display search/ads through web browser hijacking.
62% remove it
 
Powered by Should I Remove It?

Scan youtubelyricsie_x64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.