How to remove QyKernel.exe
- File Details
- Overview
- Analysis
QyKernel.exe
The module QyKernel.exe has been detected as PUP.Gen
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
95a6937d72f4aeb01b7593b7c5b75d87 |
| Size: |
576 KB |
| First Published: |
2017-08-03 03:16:26 (7 years ago) |
| Latest Published: |
2019-06-17 10:11:58 (5 years ago) |
| Status: |
PUP.Gen (on last analysis) |
|
| Analysis Date: |
2019-06-17 10:11:58 (5 years ago) |
Overview
| %programfiles%\iqiyi video\lstyle |
| %programfiles%\iqiyi video\lstyle\5.4.28.3179 |
| %sysdrive%\game\iqiyi video\lstyle |
| %sysdrive%\iqiyi video\lstyle |
| Windows 7 |
71.4% |
|
| Windows 10 |
14.3% |
|
| Windows 8 |
14.3% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0001a26f |
| Name |
Size of data |
MD5 |
| .text |
339968 |
8c832fb58309e4e272957231eb1059c8 |
| .rdata |
68608 |
e3ef19bd04cb232b26082a7908a6bb11 |
| .data |
11264 |
865ca95631bf5bce11a0e58ed948b2c6 |
| .tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
| .rsrc |
128000 |
ad6d92dd1ceacd4a31cb92aafdee901e |
| .reloc |
26624 |
b9dc5d30dda396366fd172c4610a8da5 |
