Should I block it?

No, this file is 100% safe to run.

Additional versions

2, 2, 56, 5183	8.04%
2, 2, 53, 5169	1.51%
2, 2, 53, 5169	5.03%
2, 2, 53, 5169	0.50%
2, 2, 53, 5169	16.08%
2, 2, 53, 5169	0.50%
2, 1, 50, 5145	26.13%
2, 1, 50, 5145	0.50%
2, 1, 49, 5139	0.50%
2, 1, 49, 5139	0.50%
2, 1, 49, 5139	0.50%
2, 1, 47, 5133	37.19%
2, 1, 47, 5133	0.50%
2, 1, 47, 5133	2.51%

Relationships

svchost.exe (Host Process for Windows Services by Microsoft Corporation)

PE file structure

Show functions

Import table

advapi32.dll

RegQueryValueExA, RegQueryValueExW, RegCloseKey, RegQueryInfoKeyW, RegEnumKeyExW, RegFlushKey, RegCreateKeyA, RegCreateKeyW, RegCreateKeyExA, RegCreateKeyExW, RegDeleteKeyA, RegDeleteKeyW, GetFileSecurityW, RegEnumKeyW, AdjustTokenPrivileges, SetFileSecurityA, SetFileSecurityW, LookupPrivilegeValueA, FreeSid, AllocateAndInitializeSid, EqualSid, GetTokenInformation, OpenThreadToken, OpenProcessToken, RegSetValueExW, RegSetValueExA, RegSetValueW, RegSetValueA, RegDeleteValueA, RegQueryValueW, RegQueryValueA, RegQueryInfoKeyA, RegOpenKeyExA, RegOpenKeyW, RegOpenKeyA, RegEnumValueW, RegEnumValueA, RegEnumKeyExA, RegDeleteValueW, RegOpenKeyExW

comctl32.dll

ImageList_Create, ImageList_Add, _TrackMouseEvent, ImageList_GetIconSize

comdlg32.dll

GetFileTitleW, GetSaveFileNameW, GetOpenFileNameW

gdi32.dll

CreateRoundRectRgn, CreatePatternBrush, GetStretchBltMode, SetStretchBltMode, SelectClipRgn, GetObjectA, CopyMetaFileW, CreateDCW, CreateBitmap, SetPolyFillMode, SetROP2, ExcludeClipRect, IntersectClipRect, SetTextAlign, GetLayout, SetLayout, GetViewportExtEx, GetWindowExtEx, SetViewportOrgEx, OffsetViewportOrgEx, SetViewportExtEx, ScaleViewportExtEx, SetWindowOrgEx, OffsetWindowOrgEx, SetWindowExtEx, ScaleWindowExtEx, ExtSelectClipRgn, SelectPalette, GetTextMetricsW, GetObjectType, CreateEllipticRgn, CreateHatchBrush, SetRectRgn, GetMapMode, PatBlt, DPtoLP, GetTextColor, GetCharWidthW, StretchDIBits, CreateDIBitmap, EnumFontFamiliesW, GetTextCharsetInfo, GetRgnBox, Polyline, Ellipse, CreatePalette, GetPaletteEntries, GetNearestPaletteIndex, RealizePalette, GetSystemPaletteEntries, LPtoDP, GetWindowOrgEx, GetViewportOrgEx, GetBoundsRect, ExtFloodFill, SetPaletteEntries, GetTextFaceW, SetPixelV, PtVisible, Escape, RectVisible, SetDIBits, OffsetRgn, GetDIBits, SetDIBColorTable, GetDIBColorTable, AbortPath, GetPath, EndPath, CloseFigure, BeginPath, TextOutA, GetTextExtentPoint32A, CreateFontA, SetMapMode, LineTo, MoveToEx, GetTextExtentPointW, SaveDC, CreatePen, RestoreDC, ExtTextOutW, GetClipBox, GetCurrentObject, CreateCompatibleBitmap, PtInRegion, FrameRgn, CreatePolygonRgn, Polygon, Rectangle, EnumFontFamiliesExW, GetBkColor, CreateSolidBrush, CreateFontIndirectW, FillRgn, CombineRgn, CreateRectRgnIndirect, SetBkMode, SetTextCharacterExtra, GetTextExtentPoint32W, SetTextColor, StretchBlt, SetBkColor, SetPixel, GetPixel, TextOutW, GetDeviceCaps, CreateRectRgn, BitBlt, GetObjectW, GetStockObject, CreateFontW, DeleteDC, DeleteObject, CreateCompatibleDC, CreateDIBSection, SelectObject

imm32.dll

ImmGetContext, ImmGetOpenStatus, ImmReleaseContext, ImmSetConversionStatus, ImmGetConversionStatus, ImmGetDefaultIMEWnd

iphlpapi.dll

GetAdaptersInfo

kernel32.dll

DllMain

msimg32.dll

TransparentBlt, AlphaBlend

ole32.dll

OleLoadFromStream, OleSaveToStream, StgCreateDocfile, StgOpenStorage, OleDuplicateData, CoInitializeEx, RegisterDragDrop, CoTaskMemAlloc, CoTaskMemFree, DoDragDrop, CoFreeLibrary, CoLoadLibrary, CoGetObject, CoTaskMemRealloc, OleInitialize, CoRegisterClassObject, CoRevokeClassObject, OleUninitialize, CreateStreamOnHGlobal, OleCreate, OleSetContainedObject, OleLockRunning, StringFromGUID2, CLSIDFromString, MkParseDisplayName, CreateBindCtx, CoCreateGuid, CoUninitialize, CoInitialize, CoGetClassObject, CLSIDFromProgID, CoCreateInstance, CoLockObjectExternal, RevokeDragDrop, OleGetClipboard, CoFreeUnusedLibraries, StgOpenStorageOnILockBytes, StgCreateDocfileOnILockBytes, CreateILockBytesOnHGlobal, OleIsCurrentClipboard, OleFlushClipboard, CoRegisterMessageFilter, OleCreateMenuDescriptor, OleDestroyMenuDescriptor, OleTranslateAccelerator, IsAccelerator, ReleaseStgMedium

oleacc.dll

AccessibleObjectFromWindow, CreateStdAccessibleObject, LresultFromObject

oledlg.dll

OleUIBusyW

rpcrt4.dll

UuidFromStringA

setupapi.dll

SetupDiDestroyDeviceInfoList, SetupDiGetDeviceRegistryPropertyW, SetupDiGetClassDevsW, SetupDiEnumDeviceInfo

shell32.dll

SHGetFileInfoW, SHGetPathFromIDListW, ShellExecuteW, DragQueryFileW, DragFinish, DragQueryPoint, SHAppBarMessage, SHGetSpecialFolderLocation, SHGetDesktopFolder, SHBrowseForFolderW, Shell_NotifyIconW, SHCreateDirectoryExW, DragAcceptFiles, SHFileOperationW, SHChangeNotify, SHGetFolderPathW

shlwapi.dll

PathRemoveFileSpecW, PathFindExtensionW, PathFindFileNameW, PathStripToRootW, PathIsUNCW

urlmon.dll

UrlMkGetSessionOption, UrlMkSetSessionOption

user32.dll

DllMain

version.dll

GetFileVersionInfoW, VerQueryValueW, GetFileVersionInfoSizeW

wininet.dll

InternetConnectA, InternetCrackUrlW, InternetSetCookieW, InternetSetOptionW, InternetCrackUrlA, InternetSetCookieA, InternetOpenW, InternetQueryDataAvailable, InternetOpenUrlW, InternetReadFile, InternetCreateUrlW, InternetCanonicalizeUrlW, HttpEndRequestW, InternetOpenA, HttpAddRequestHeadersA, InternetAttemptConnect, InternetConnectW, InternetWriteFile, HttpOpenRequestA, HttpSendRequestExA, InternetCloseHandle, HttpOpenRequestW, HttpQueryInfoW, HttpAddRequestHeadersW, HttpSendRequestW

winmm.dll

mixerGetNumDevs, mixerGetControlDetailsW, mixerSetControlDetails, mixerGetLineInfoW, PlaySoundW, mixerGetDevCapsW, mixerGetLineControlsW, mixerOpen, mixerClose, waveOutGetNumDevs, mixerGetID

winspool.drv

DocumentPropertiesW, OpenPrinterW, ClosePrinter

gom.exe

GOM Player by GRETECH (Signed)

Remove gom.exe

Version:	2, 2, 53, 5169
MD5:	8c3ba0953827e74c2d7a3c0b52a11dc5
SHA1:	73bc849bcc6dd07523707c41ddd31a12200c228a
SHA256:	b6639c5e7096bdd539b14ece67f0d407dafb8944ebff54221ecf543cde0115a6

About gom.exe (from GRETECH)

“GOM Media Player is freeware video playback software developed by the South Korean company, Gretech Corp. Designed with both power and simplicity in mind, GOM Media Player is an ideal video player for”

Overview

gom.exe executes as a process with the local user's privileges typically within the context of its parent svchost.exe (Host Process for Windows Services by Microsoft Corporation). It configures an autoplay handler withing explorer.exe named GOMPlayDVDOnArrival that will launch the program automatically. It is installed with a couple of know programs including GOM Player published by Gretech Corporation and GOM Player published by Gretech Corporation. The file is digitally signed by GRETECH which was issued by the VeriSign certificate authority (CA).

Details

File name:	gom.exe
Product name:	GOM Player
Typical file path:	C:\Program Files\gretech\gomplayer\gom.exe
File version:	2, 2, 53, 5169
Size:	6.74 MB (7,067,736 bytes)
Build date:	8/28/2013 4:43 AM
Certificate
Issued to:	GRETECH
Authority (CA):	VeriSign
Effective date:	Wednesday, March 7, 2012
Expiration date:	Tuesday, May 7, 2013
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

GOM Player

Gretech Corporation

24% remove

GOM Player (Gretech Online Movie Player) is a 32/64-bit media player for Microsoft Windows, distributed by the Gretech Corporation of South Korea. It is the primary client player for South Korean GOM-TV, and is more popular in South Korea than any other media player. Key strengths inherited from libavcodec include wide ranging ability to play media files, including .flv - without needing to obtain an external codec, and the ability to p...

Behaviors

Autoplay handlers

Runs under the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers'

Handler name 'GOMPlayMediaOnArrival'
Handler name 'GOMPlayDVDOnArrival'

Scheduled tasks

The task '{7A2BA6FE-EFE1-4923-AFF4-342A8498A372}' runs on registration in the path '\{7A2BA6FE-EFE1-4923-AFF4-342A8498A372}'

Network connections

[UDP] listens on port 60815

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.21856451%	0.028634%
Kernel CPU:	0.10558347%	0.013761%
User CPU:	0.11298104%	0.014873%
Kernel CPU time:	21,856 ms/min	100,923,805ms/min
Memory
Private memory:	103.74 MB	21.59 MB
Private (maximum):	88.3 MB
Private (minimum):	84.85 MB
Non-paged memory:	103.74 MB	21.59 MB
Virtual memory:	345.15 MB	140.96 MB
Virtual memory (peak):	353.85 MB	169.69 MB
Working set:	86.27 MB	18.61 MB
Working set (peak):	90.97 MB	37.95 MB
Resource allocations
Threads:	47	12
Handles:	692	600
GUI GDI count:	349	103
GUI GDI peak:	364	142
GUI USER count:	95	49
GUI USER peak:	106	71

Process properties

Integrety level:	Medium
Platform:	32-bit
Owner:	User
Parent process:	svchost.exe (Host Process for Windows Services by Microsoft Corporation)

Threads

Averages

NeMP4Splitter.ax
Total CPU:	4.20184926%	0.272967%
Kernel CPU:	1.72117401%	0.107585%
User CPU:	2.48067525%	0.165382%
CPU cycles:	89,851,989/sec	5,741,424/sec
Memory:	280 KB	1.16 MB
GOM.EXE (main module)
Total CPU:	1.99077915%
Kernel CPU:	1.23462483%
User CPU:	0.75615431%
CPU cycles:	64,230,300/sec
Memory:	6.9 MB
GRFU.ax
Total CPU:	1.08377360%
Kernel CPU:	0.50020320%
User CPU:	0.58357040%
CPU cycles:	18,639,134/sec
Memory:	192 KB
DSOUND.dll
Total CPU:	0.39881718%
Kernel CPU:	0.04198076%
User CPU:	0.35683643%
CPU cycles:	5,801,331/sec
Memory:	456 KB
quartz.dll
Total CPU:	0.04177302%
Kernel CPU:	0.03135351%
User CPU:	0.01041951%
CPU cycles:	1,744,882/sec
Memory:	1.46 MB
pbproxy.dll (PBProxy.dll by PingBetter)
Total CPU:	0.00646295%
Kernel CPU:	0.00430839%
User CPU:	0.00215456%
CPU cycles:	76,146/sec
Memory:	312 KB
WININET.dll
Total CPU:	0.00430739%
Kernel CPU:	0.00430739%
User CPU:	0.00000000%
CPU cycles:	154,169/sec
Memory:	980 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	24.62%
Windows 7 Ultimate	24.12%
Microsoft Windows XP	13.57%
Windows 8 Pro	9.55%
Windows 7 Professional	8.54%
Windows 7 Home Basic	5.53%
Windows 8 Single Language	4.02%
Windows 8	3.52%
Windows 8 Enterprise N	2.01%
Windows 8 Enterprise Evaluation	1.01%
Windows Vista Home Basic	1.01%
Windows 7 Ultimate N	1.01%
Windows Vista Home Premium	1.01%
Windows 8.1 Pro	0.50%

Distribution by country

United States installs about 20.10% of GOM Player.

Distribution by PC manufacturer

PC Manufacturer	distribution
Hewlett-Packard	17.45%
Sony	14.47%
Acer	14.04%
Dell	11.91%
Toshiba	11.91%
Intel	10.21%
ASUS	9.36%
Lenovo	3.40%
American Megatrends	2.55%
Compaq	1.70%
GIGABYTE	1.70%
MSI	0.85%
Sahara	0.43%

Remove Adware and Spyware Programs, FREE Download!