How to remove kernelUpdate.exe
- File Details
- Overview
- Analysis
kernelUpdate.exe
The module kernelUpdate.exe has been detected as PUP.Baidu
File Details
Company Name: |
|
MD5: |
b20e57f3b9803c076dbaf25ab7932c90 |
Size: |
860 KB |
First Published: |
2017-05-26 00:04:16 (6 years ago) |
Latest Published: |
2018-05-12 10:11:58 (5 years ago) |
Status: |
PUP.Baidu (on last analysis) |
|
Analysis Date: |
2018-05-12 10:11:58 (5 years ago) |
Overview
%appdata%\baidu\baiduyunguanjia |
%appdata%\baidu |
%sysdrive% |
%programfiles%\baidu |
Windows 10 |
80.0% |
|
Windows 8.1 |
20.0% |
|
Analysis
Subsystem: |
Windows CUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x000739ae |
Name |
Size of data |
MD5 |
.text |
643072 |
fd3331f99498fcf842e5d6ae1ccb4020 |
.rdata |
151552 |
c21ac066c6ff4b72da13c9e24a88cc57 |
.data |
65536 |
7d1b1378f8a6e96db1d5ab0e23b0775a |
.tls |
4096 |
620f0b67a91f7f74151bc5be745b7110 |
.rsrc |
4096 |
d229ac1efcf80d6628a18de902767684 |