How to remove delegate_execute.exe
- File Details
- Overview
- Analysis
delegate_execute.exe
The module delegate_execute.exe has been detected as PUP.UCBrowser
File Details
Product Name: |
|
Company Name: |
|
MD5: |
5d64eb36d0dc4a3140853030f4055595 |
Size: |
696 KB |
First Published: |
2017-05-22 03:00:45 (7 years ago) |
Latest Published: |
2020-11-07 11:44:31 (4 years ago) |
Status: |
PUP.UCBrowser (on last analysis) |
|
Analysis Date: |
2020-11-07 11:44:31 (4 years ago) |
Overview
%programfiles%\ucbrowser\application\6.1.2015.1007 |
%programfiles%\ucbrowser\application |
%programfiles%\ucbrowser |
%programfiles%\ucbrowser\application\5.4.5426.1034\update\0\remote\0_beta_package |
%programfiles%\ucbrowser\5.2.2787.1029\update\0\remote\0_beta_package |
%sysdrive%\--portab-290718\ucbrowserportable\app\chrome-bin |
%programfiles%\ucbrowser\application |
%programfiles%\ucbrowser\application |
%programfiles%\ucbrowser\application |
%programfiles%\ucbrowser\application |
|
17.7% |
|
|
12.9% |
|
|
12.9% |
|
|
8.9% |
|
|
6.5% |
|
|
4.8% |
|
|
4.8% |
|
|
3.2% |
|
|
2.4% |
|
|
2.4% |
|
|
2.4% |
|
|
1.6% |
|
|
1.6% |
|
|
1.6% |
|
|
1.6% |
|
|
1.6% |
|
|
1.6% |
|
|
1.6% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
Windows 7 |
66.9% |
|
Windows 10 |
23.1% |
|
Windows 8 |
5.4% |
|
Windows 8.1 |
3.8% |
|
Windows XP |
0.8% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00038c38 |
Name |
Size of data |
MD5 |
.text |
382976 |
d3b521dad7abd8d94e85729713854217 |
.rdata |
289792 |
e59a52b841154bd971d75b63ee97f255 |
.data |
4608 |
2c14da36a85f25f8ba95078c0679fa5a |
.gfids |
1024 |
9d193b8a5e4c7007353021468d6a80a0 |
.tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
_RDATA |
512 |
6a4d701a80c9128ba46180eb8218a58f |
.rsrc |
3072 |
365ac8444ee650f11ec8d59aa45e719e |
.reloc |
16384 |
fecf156767b2ae9c464d00146011a109 |