How to remove A0426635.exe
- File Details
- Overview
- Analysis
A0426635.exe
The module A0426635.exe has been detected as Adware.Kuaiba
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
6c20b36a38e81efdc456b598ec7aa359 |
| Size: |
903 KB |
| First Published: |
2017-05-21 13:07:18 (7 years ago) |
| Latest Published: |
2019-06-30 06:12:02 (5 years ago) |
| Status: |
Adware.Kuaiba (on last analysis) |
|
| Analysis Date: |
2019-06-30 06:12:02 (5 years ago) |
Overview
| Signed By: |
上海广乐网络科技有限公司 |
| Status: |
Invalid (digital signature could be stolen or file could be patched) |
| %temp%\kz7zdata.7z\x86 |
| %programfiles%\؟ىر¹\x86 |
| %programfiles%\¿ìñ¹\x86 |
| %sysdrive%\system volume information\_restore{f14a1c2c-a641-43f9-a293-b0cb265a4677}\rp1242 |
| %programfiles%\ｿ・ｹ\x86 |
| %programfiles%\תוכנת זבל למחיקה\x86 |
| %programfiles%\ώμρή\x86 |
| %programfiles%\їмс№\x86 |
| %temp%\qzt2b3d.294\x86.zip\x86 |
| %sysdrive%\$recycle.bin\s-1-5-21-4073234384-243557768-2028262755-1001\$rqhhrc4.7z\x86 |
| Update.exe |
| A0426635.exe |
| $RNCO97X.exe |
|
13.3% |
|
|
13.3% |
|
|
10.0% |
|
|
6.7% |
|
|
6.7% |
|
|
6.7% |
|
|
6.7% |
|
|
5.0% |
|
|
5.0% |
|
|
5.0% |
|
|
3.3% |
|
|
3.3% |
|
|
1.7% |
|
|
1.7% |
|
|
1.7% |
|
|
1.7% |
|
|
1.7% |
|
|
1.7% |
|
|
1.7% |
|
|
1.7% |
|
|
1.7% |
|
| Windows 10 |
50.0% |
|
| Windows 7 |
25.0% |
|
| Windows 8.1 |
18.3% |
|
| Windows XP |
6.7% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000379d1 |
| Name |
Size of data |
MD5 |
| .text |
595968 |
34685c75e58a36b426648174f8cc45eb |
| .rdata |
96768 |
14fd058a3f23a78eb6b111812e2dc97a |
| .data |
13824 |
b9ea2cec52b6f0c6d86c7ec61c88c705 |
| .rsrc |
176128 |
4125700d9bd8d073f4a0e1f76307f822 |
| .reloc |
34304 |
5d866b22d6c73cf92f2aa3181250e459 |
