How to remove QyKernel.exe
- File Details
- Overview
- Analysis
QyKernel.exe
The module QyKernel.exe has been detected as PUP.Gen
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
6fbe847f5084f1683addf336845975c7 |
| Size: |
563 KB |
| First Published: |
2017-05-25 12:04:44 (7 years ago) |
| Latest Published: |
2018-12-22 04:42:57 (5 years ago) |
| Status: |
PUP.Gen (on last analysis) |
|
| Analysis Date: |
2018-12-22 04:42:57 (5 years ago) |
Overview
| %programfiles%\iqiyi video\pstyle |
| %programfiles%\iqiyi video |
| %sysdrive%\iqiyi video |
| %programfiles%\iqiyi video |
| %programfiles%\iqiyi video |
| qykernel.exe |
| QyKernel.exe |
| Windows 7 |
51.5% |
|
| Windows 10 |
39.4% |
|
| Windows 8.1 |
9.1% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0001947f |
| Name |
Size of data |
MD5 |
| .text |
336384 |
78b4c19e23d25d88ae322429b98fc97a |
| .rdata |
67072 |
da8294ed3ca3943f3afbbe72fea46bf8 |
| .data |
11264 |
8467840f037b27da40b094e91f789fae |
| .tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
| .rsrc |
128000 |
3441cf51ed5c8726c9eb8d6f9bf34af2 |
| .reloc |
26112 |
c80b1010461b23e6fd85b8b158f3aecb |
