How to remove KZReport.exe
- File Details
- Overview
- Analysis
KZReport.exe
The module KZReport.exe has been detected as Adware.Kuaiba
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
2d8961bda024fbc93842f8b733c67f41 |
| Size: |
933 KB |
| First Published: |
2017-05-29 18:01:23 (7 years ago) |
| Latest Published: |
2020-05-30 03:32:59 (4 years ago) |
| Status: |
Adware.Kuaiba (on last analysis) |
|
| Analysis Date: |
2020-05-30 03:32:59 (4 years ago) |
Overview
| Signed By: |
上海广乐网络科技有限公司 |
| Status: |
Invalid (digital signature could be stolen or file could be patched) |
| %programfiles%\23\x86 |
| %programfiles%\їмс№\x86 |
| %sysdrive%\$recycle.bin\s-1-5-21-1731075834-680073870-1864487519-1000\$rb7a174.7z\x86 |
| %temp%\kz7zdata.7z |
| %sysdrive%\adwcleaner\quarantine\exuieaoeii |
| %sysdrive%\new folder\users\administrator\appdata\local\temp\kz7zdata.7z |
| %sysdrive%\filehistory\sebastiaan\desktop-qqcoa5v\data\c\users\sebastiaan\appdata\local\temp\kz7zdata (2016_11_18 20_21_07 utc).7z |
| %sysdrive%\$recycle.bin\s-1-5-21-3104682630-3730162550-3280939921-1001\$r36gqh7 |
|
30.0% |
|
|
20.0% |
|
|
10.0% |
|
|
10.0% |
|
|
10.0% |
|
|
10.0% |
|
|
10.0% |
|
| Windows 8.1 |
50.0% |
|
| Windows 7 |
40.0% |
|
| Windows 10 |
10.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0004a172 |
| Name |
Size of data |
MD5 |
| .text |
734720 |
951032c0ba7288a85889f8de01253129 |
| .rdata |
135168 |
77339badabce4a2e7a13515aa7412a9c |
| .data |
18432 |
1cef6dc770bc82e6b0f302a3e5df3515 |
| .rsrc |
58880 |
95b7dde91fd5f13903761571a840499d |
