Information about $R5YT3SX.dll

$R5YT3SX.dll

File Details

Product Name:

baohe Application
Company Name:

Baidu.com, Inc.
MD5: 25f2f226e07224f6051bb1ea438dc655
Size: 147 KB
First Published: 2017-05-21 04:03:41 (7 years ago)
Latest Published: 2020-10-17 10:45:39 (4 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2020-10-17 10:45:39 (4 years ago)

Overview

Signed By: BeiJing Baidu Netcom Science Technology Co., Ltd
Status: Valid

Common Places:

%appdata%\baidu\baiduyunguanjia\autoupdate
%appdata%\baidu\baidunetdisk\autoupdate
%desktop%\utility\baiduyun 5.5.0 (portable)\baidunetdisk\autoupdate
%sysdrive%\adwcleaner\quarantine\c\users\lmstudio\appdata\roaming\baidu\baiduyunguanjia\autoupdate
%sysdrive%\windows.old\users\user\appdata\roaming\baidu\baiduyunguanjia\autoupdate
%system%\config\systemprofile\appdata\roaming\baidu\baidunetdisk\autoupdate
%sysdrive%\1programexe\3web-net-down\down-baiduyunguanjia
%appdata%\baidu\baiduyunguanjia
%desktop%\片山　高志\appdata\roaming\baidu\baiduyunguanjia
%appdata%\baidu\baidunetdisk

File Names:

AutoUpdateUtil.dll
$R5YT3SX.dll
AutoUpdateUtil.dll.vir

Geography:

52.7%
23.3%
6.5%
5.0%
3.1%
1.9%
1.5%
1.5%
1.1%
0.8%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%

OS Version:

Windows 10 50.0%
Windows 7 43.1%
Windows 8.1 4.6%
Windows 8 1.5%
Windows Server 2012 R2 0.4%
Windows Server 2008 R2 0.4%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x10000000
Entry Address: 0x00009bad

PE Sections:

Name Size of data MD5
.text 100352 0691bed1466d316d04c3e11b3c840c3d
.rdata 30720 2096995029550312a82ea98aab81cb97
.data 5632 670419e63c91791daeec8273a590042d
.rsrc 1024 9ea58a7fabaf519f4629bc051146654b
.reloc 6144 221e5b12067883dc73fb38d7af5e39dc

More information:

Search on Virustotal
copyright for information about $R5YT3SX.dll