Information about kernelpromote.dll.o
- File Details
- Overview
- Analysis
kernelpromote.dll.o
File Details
| Company Name: |
|
| MD5: |
4a8e03a342055cc0bea514ba04a05bcb |
| Size: |
4 MB |
| First Published: |
2017-05-21 04:03:41 (7 years ago) |
| Latest Published: |
2020-04-18 13:21:06 (4 years ago) |
| Status: |
Undefined (on last analysis) |
|
| Analysis Date: |
2020-04-18 13:21:06 (4 years ago) |
Overview
| %temp%\baidu\autoupdate |
| %appdata%\baidu\baidunetdisk |
| %appdata%\baidu\baiduyunguanjia |
| %sysdrive%\windows.old\users\jingwei\appdata\local\temp\baidu\autoupdate |
| %sysdrive%\temp\baidu\autoupdate |
| %desktop%\xdir\百度网盘 552\baidu |
| %temp%\baidu |
| %appdata%\baidu |
| %programfiles% |
| %sysdrive%\tmp\baidu |
| kernelpromote.dll |
| kernelpromote.dll.o |
| kernelpromote.dll.quarantined |
|
60.8% |
|
|
20.4% |
|
|
4.6% |
|
|
3.4% |
|
|
1.7% |
|
|
1.7% |
|
|
1.5% |
|
|
1.2% |
|
|
1.2% |
|
|
0.7% |
|
|
0.7% |
|
|
0.5% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
| Windows 7 |
54.4% |
|
| Windows 10 |
35.4% |
|
| Windows 8.1 |
7.5% |
|
| Windows Server 2003 |
1.9% |
|
| Windows 8 |
0.7% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x0025114f |
| Name |
Size of data |
MD5 |
| .text |
3479040 |
a9c3218751775a7b7eaec56a15348a70 |
| .rdata |
670720 |
8a3376710ae7466c7c70eddfa790235e |
| .data |
128512 |
8c5d258f5ccfb01390446449a3fae289 |
| .tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
| .rsrc |
1536 |
15a53fe91ca5c9d4fe70626266d61130 |
| .reloc |
176128 |
5fc36bf53abbd39beaa75c4cd05d4c8d |
