Information about PHW.dll.vir
- File Details
- Overview
- Analysis
PHW.dll.vir
File Details
Product Name: |
|
Company Name: |
|
MD5: |
3538979ae04e64eb687829463fee4f13 |
Size: |
325 KB |
First Published: |
2017-06-14 10:08:59 (7 years ago) |
Latest Published: |
2021-08-13 20:26:21 (3 years ago) |
Status: |
Undefined (on last analysis) |
|
Analysis Date: |
2021-08-13 20:26:21 (3 years ago) |
Overview
%appdata%\iqiyi video\lstyle |
%sysdrive%\adwcleaner\quarantine\c\users\komputerkomputer\appdata\roaming\iqiyi video\lstyle |
%sysdrive%\adwcleaner\quarantine\zmrf6ci6nx |
%sysdrive%\windows.old\users\nguyen\appdata\roaming\iqiyi video |
%appdata%\iqiyi video |
%profile%\dmin\application data\iqiyi video |
%sysdrive%\adwcleaner\quarantine\c\users\mof\appdata\roaming\iqiyi video |
%sysdrive%\adwcleaner\quarantine\kuutsgcorb |
%appdata%\iqiyi video |
%appdata%\iqiyi video |
|
18.2% |
|
|
13.6% |
|
|
9.1% |
|
|
9.1% |
|
|
9.1% |
|
|
9.1% |
|
|
4.5% |
|
|
4.5% |
|
|
4.5% |
|
|
4.5% |
|
|
4.5% |
|
|
4.5% |
|
|
4.5% |
|
Windows 7 |
52.2% |
|
Windows 10 |
30.4% |
|
Windows 8.1 |
13.0% |
|
Windows XP |
4.3% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x10000000 |
Entry Address: |
0x0002c4be |
Name |
Size of data |
MD5 |
.text |
245760 |
6a975e9d841187245fac70b04afe4991 |
.rdata |
45056 |
5c96cd235dabda9d52a071c9a65eb754 |
.data |
12288 |
591b066b920ed57c20952386557a9517 |
.rsrc |
4096 |
4441d0c49450fed8c48ec840c2963d44 |
.reloc |
16384 |
e9da4f1477ef16c2ac8634d50711aa19 |