How to remove recommendwnd.exe
- File Details
- Overview
- Analysis
recommendwnd.exe
The module recommendwnd.exe has been detected as PUP.Youku
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
742b8ba9461cb036d7088f09f9eab3a2 |
| Size: |
1 MB |
| First Published: |
2017-10-30 05:05:49 (6 years ago) |
| Latest Published: |
2020-08-18 13:14:45 (3 years ago) |
| Status: |
PUP.Youku (on last analysis) |
|
| Analysis Date: |
2020-08-18 13:14:45 (3 years ago) |
Overview
| %appdata%\youku\upgrade\7.3.1.10171 |
| %programfiles%\youku |
| %sysdrive%\adwcleaner\quarantine\fraqbc8wsa |
| Windows 10 |
33.3% |
|
| Windows 8.1 |
33.3% |
|
| Windows 8 |
33.3% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000c89ab |
| Name |
Size of data |
MD5 |
| .text |
876544 |
6945b617170ee1a1248e73aecc57e153 |
| .rdata |
337408 |
38a05b6bacc8ac9a839eadac0d947a5f |
| .data |
46080 |
e6ddddeff3140882c473ba1b09fb3f44 |
| .tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
| .rsrc |
96768 |
47729f549b3c470136a208fb4eb341de |
| .reloc |
60928 |
ea3963cd4073856990412cb678863d89 |
