How to remove A0040815.exe
- File Details
- Overview
- Analysis
A0040815.exe
The module A0040815.exe has been detected as PUP.Baidu
File Details
| Company Name: |
|
| MD5: |
cabcb60868d528859c37f76f3e43fc65 |
| Size: |
2 MB |
| First Published: |
2017-06-07 10:03:59 (6 years ago) |
| Latest Published: |
2019-06-20 11:15:31 (4 years ago) |
| Status: |
PUP.Baidu (on last analysis) |
|
| Analysis Date: |
2019-06-20 11:15:31 (4 years ago) |
Overview
| %appdata%\baidu\baidunetdisk |
| %appdata%\baidu\baiduyunguanjia |
| %desktop%\cks_util\baidu net disk 5.5.1.13 portable |
| %sysdrive%\windows.old\users\johnny\appdata\roaming\baidu\baidunetdisk |
| %sysdrive%\system volume information\_restore{3b6b1e0b-5ca5-4f84-a6b9-9fde73475d3f}\rp34 |
| %appdata%\baidu |
| %sysdrive%\win7-b\百度 |
| %sysdrive%\chrome\baidunetdisk_portable\baidunetdisk_portable |
| %profile%\downloads\baiduyunguanjiabuxiansuwanmeipojieban\啃僅堁奪模祥癹厒俇藝賤唳\啃僅堁笝憤賤唳 |
| %programfiles% |
| kernelUpdate.exe |
| A0040815.exe |
|
54.1% |
|
|
14.1% |
|
|
10.7% |
|
|
10.2% |
|
|
3.4% |
|
|
3.4% |
|
|
1.0% |
|
|
1.0% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
| Windows 10 |
50.7% |
|
| Windows 7 |
29.8% |
|
| Windows 8.1 |
17.6% |
|
| Windows XP |
1.0% |
|
| Windows 8 |
0.5% |
|
| Windows Server 2008 R2 |
0.5% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x001e0a63 |
| Name |
Size of data |
MD5 |
| .text |
2194944 |
f647cb04e2b2c040b3ae854ccf47964c |
| .rdata |
495104 |
e90f7afb29685e830a7e11f0fce19310 |
| .data |
87552 |
b3649a2afb923d502a8fffef9c241fb6 |
| .tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
| .rsrc |
1536 |
6715da837c655dcdb8419beb1c785fd2 |
| .reloc |
98816 |
d16c3fe66c160a09d80052d13917c1b8 |
