Information about Bu_.exe
- File Details
- Overview
- Analysis
Bu_.exe
File Details
| Product Name: |
|
| MD5: |
edb38a7483d25937ad5c7d918518a64b |
| Size: |
971 KB |
| First Published: |
2017-08-10 21:02:34 (8 years ago) |
| Latest Published: |
2021-08-12 20:27:04 (4 years ago) |
| Status: |
Undefined (on last analysis) |
|
| Analysis Date: |
2021-08-12 20:27:04 (4 years ago) |
Overview
| %programfiles%\tencent\wechat |
| %temp%\~nsu.tmp |
| %profile%\downloads\wechatsetup |
| %sysdrive%\adwcleaner\quarantine\rywtiizs2t\wechat |
| %profile%\onedrive-timmalone81\onedrive - 5tb(1)\active working\wechat main\wechat |
| %sysdrive%\adwcleaner\quarantine\3solbph71y\wechat |
| %profile%\wechat |
| %sysdrive%\应用程序\wechat |
| %sysdrive%\adwcleaner\quarantine\fraqbc8wsa\wechat |
| %programfiles%\tencent |
| Uninstall.exe |
| Bu_.exe |
| Cu_.exe |
| Au_.exe |
| uninstall.exe |
| Uninstall.exe_1506151838891 |
| Lu_.exe |
| Hu_.exe |
| Eu_.exe |
| Mu_.exe |
| Iu_.exe |
| Nu_.exe |
| Fu_.exe |
| Du_.exe |
| Ku_.exe |
| Gu_.exe |
| Ju_.exe |
| Qu_.exe |
| Ou_.exe |
| Ru_.exe |
| Pu_.exe |
| Uninstall.exe_1502844920440 |
| Taiwan |
36.8% |
|
| China |
16.2% |
|
| Hong Kong |
8.4% |
|
| United States |
4.9% |
|
| Vietnam |
4.7% |
|
| South Korea |
4.7% |
|
| Malaysia |
2.4% |
|
| Russia |
2.2% |
|
| Thailand |
2.2% |
|
| Canada |
1.5% |
|
| Japan |
1.5% |
|
| Australia |
1.4% |
|
| Macau |
1.3% |
|
| Indonesia |
1.1% |
|
| Ukraine |
0.8% |
|
| Myanmar |
0.8% |
|
| Cambodia |
0.6% |
|
| Italy |
0.5% |
|
| Germany |
0.4% |
|
| Czech Republic |
0.4% |
|
| United Kingdom |
0.4% |
|
| Philippines |
0.3% |
|
| Sweden |
0.3% |
|
| New Zealand |
0.3% |
|
| Turkey |
0.3% |
|
| Pakistan |
0.3% |
|
| Denmark |
0.3% |
|
| Egypt |
0.3% |
|
| France |
0.2% |
|
| Singapore |
0.2% |
|
| Netherlands |
0.2% |
|
| Argentina |
0.2% |
|
| Israel |
0.2% |
|
| Laos |
0.2% |
|
| Bangladesh |
0.2% |
|
| Nepal |
0.2% |
|
| Algeria |
0.2% |
|
| Bolivia |
0.2% |
|
| Saudi Arabia |
0.2% |
|
| India |
0.2% |
|
| Portugal |
0.2% |
|
| Mongolia |
0.2% |
|
| Colombia |
0.1% |
|
| Spain |
0.1% |
|
| Libya |
0.1% |
|
| South Africa |
0.1% |
|
| Poland |
0.1% |
|
| Iran |
0.1% |
|
| Kuwait |
0.1% |
|
| Romania |
0.1% |
|
| Iraq |
0.1% |
|
| Mexico |
0.1% |
|
| Bulgaria |
0.1% |
|
| Serbia |
0.1% |
|
| Brazil |
0.1% |
|
| Kazakhstan |
0.1% |
|
| Armenia |
0.1% |
|
| Brunei |
0.1% |
|
| United Arab Emirates |
0.1% |
|
| Windows 10 |
72.9% |
|
| Windows 7 |
20.9% |
|
| Windows 8.1 |
3.6% |
|
| Windows Server 2012 R2 |
1.7% |
|
| Windows 8 |
0.4% |
|
| Windows Server 2016 |
0.3% |
|
| Windows XP |
0.2% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0000335a |
| Name |
Size of data |
MD5 |
| .text |
24576 |
5e32878b5f332958538d1180572efaac |
| .rdata |
5120 |
2222fe44ebbadbc32af32dfc9c88e48e |
| .data |
1536 |
bdee9c3c56769fb763ba9ed65b414b2c |
| .ndata |
0 |
00000000000000000000000000000000 |
| .rsrc |
361472 |
ed2a5eaa886ae43fbf55c868f2d8d086 |
