How to remove BaiduYunGuanjia.exe
- File Details
- Overview
- Analysis
BaiduYunGuanjia.exe
The module BaiduYunGuanjia.exe has been detected as PUP.Baidu
File Details
| Product Name: |
|
| MD5: |
f55e05773858cbc3695168f564781363 |
| Size: |
7 MB |
| First Published: |
2017-05-21 17:06:55 (6 years ago) |
| Latest Published: |
2019-08-01 13:27:58 (4 years ago) |
| Status: |
PUP.Baidu (on last analysis) |
|
| Analysis Date: |
2019-08-01 13:27:58 (4 years ago) |
Overview
| %appdata%\baidu\baiduyunguanjia |
| %sysdrive%\$recycle.bin\s-1-5-21-2919837739-2587390054-3968611417-1001\$r3xubo9\baiduyunguanjia |
| %sysdrive%\1programexe\3web-net-down |
| %appdata%\baidu |
| %programfiles% |
| %programfiles%\baidu |
| %sysdrive% |
| %appdata%\baidu |
| baiduyunguanjia.exe |
| BaiduYunGuanjia.exe |
| baiduyunguanjia.exe.old.0 |
|
55.1% |
|
|
20.4% |
|
|
10.2% |
|
|
10.2% |
|
|
2.0% |
|
|
2.0% |
|
| Windows 10 |
49.0% |
|
| Windows 7 |
30.6% |
|
| Windows Server 2003 |
18.4% |
|
| Windows 8 |
2.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00311a3f |
| Name |
Size of data |
MD5 |
| .text |
4061184 |
2432cb55f88a66c13e77f79a245c2c93 |
| .rdata |
1018880 |
256ba7b03cc6c0a553dd7ed07e0fe8c0 |
| .data |
220160 |
1ca51f352b4ec773872f017f57665e63 |
| .vmp0 |
1503232 |
87155b3ed5e7d076d0c9744485abdf97 |
| .reloc |
338432 |
2a579064d82f94ef6d0ac9cfa7b326ab |
| .rsrc |
532992 |
722af1896df9e29aff5afea7faad71c5 |
