How to remove youkuclient_setup_ywebitudouupgrade_7.1.8.4246.exe
- File Details
- Overview
- Analysis
youkuclient_setup_ywebitudouupgrade_7.1.8.4246.exe
The module youkuclient_setup_ywebitudouupgrade_7.1.8.4246.exe has been detected as PUP.Youku
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
125fea278dcbf095b1121b0a1407d04d |
| Size: |
63 MB |
| First Published: |
2017-05-28 13:04:20 (7 years ago) |
| Latest Published: |
2018-07-23 21:06:55 (6 years ago) |
| Status: |
PUP.Youku (on last analysis) |
|
| Analysis Date: |
2018-07-23 21:06:55 (6 years ago) |
Overview
| %appdata%\itudou\upgrade\temp\unzip |
| %appdata%\itudou\upgrade\temp\youkuclient_setup_ywebitudouupgrade_7.1.8.4246.zip |
| %appdata%\itudou\temp |
| %appdata%\itudou\upgrade\temp |
| %appdata%\itudou |
| Windows 7 |
55.0% |
|
| Windows 10 |
45.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000039e3 |
| Name |
Size of data |
MD5 |
| .text |
28672 |
f569e353af0ed51bf4c216faa9bed4e7 |
| .rdata |
11264 |
91eee43954e068e650f7b73a8b0e6915 |
| .data |
512 |
db9f7acbf1c3ddfe255077b699955dfa |
| .ndata |
0 |
00000000000000000000000000000000 |
| .rsrc |
203264 |
e3c68c4f836c49846f19f5c4c69c73e2 |
| .reloc |
4096 |
52578eb5745557dc0b6ec09da0c55794 |
