» hao123.exe
Overview
Analysis
File Details

hao123.exe

hao123 Desktop Shortcut

Beijing baidu Netcom science and technology co.ltd

The file hao123.exe by Beijing baidu Netcom science and technology co.ltd has been detected as a potentially unwanted program by 2 anti-malware scanners.

File name:

hao123.exe

Publisher:

Baidu.com (signed by Beijing baidu Netcom science and technology co.ltd)

Product:

hao123 Desktop Shortcut

Version:

1.0.0.111

MD5:

1881e7b8922f57f335ec6271e03979ee

SHA-1:

4c2c2b4a3f2172509c6bf3bd284eb2d3d437d2e6

SHA-256:

7b829720e74bcb13327d1b88f137fdd02df013a191e9527d184791bf52e07e21

Scanner detections:

2 / 68

Status:

Potentially unwanted

Analysis date:

4/25/2024 6:44:04 AM UTC (today)

Scan engine

Detection

Engine version

ESET NOD32

Win32/Hao123.C potentially unwanted application

7.0.302.0

Reason Heuristics

PUP.Hao123.ShrtCt.Meta (M)

16.4.24.12

File size:

946.8 KB (969,544 bytes)

Product version:

1.0.0.111

Original file name:

hao123.exe

Common path:

C:\users\{user}\appdata\local\temp\bdg188.tmp

Digital Signature

Signed by:

Beijing baidu Netcom science and technology co.ltd

Authority:

VeriSign, Inc.

Valid from:

2/27/2012 9:00:00 AM

Valid to:

2/27/2015 8:59:59 AM

Subject:

CN=Beijing baidu Netcom science and technology co.ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Beijing baidu Netcom science and technology co.ltd, L=Beijing, S=Beijing, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

56659719569BE07B775A1B2275E2D83A

File PE Metadata

Compilation timestamp:

7/16/2014 4:36:36 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:ef58sbh85AjkLSG8mohB8jrciCfdfTHCONzdYxe5hTzx4SrHXTCvikuZBAe+V5:eOGxzddx4SHC3uT4b

Entry address:

0x6A2DB

Entry point:

E8, DB, C4, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 20, 57, 56, E8, BC, AF, FF, FF, 33, FF, 59, 3B, F7, 75, 1D, E8, 4A, 1F, 00, 00, 57, 57, 57, 57, 57, C7, 00, 16, 00, 00, 00, E8, 35, B2, FF, FF, 83, C4, 14, 83, C8, FF, EB, 34, 39, 7D, 0C, 74, DE, B9, FF, FF, FF, 7F, C7, 45, EC, 49, 00, 00, 00, 89, 75, E8, 89, 75, E0, 89, 4D, E4, 3B, C1, 77, 03, 89, 45, E4, FF, 75, 14, 8D, 45, E0, FF, 75, 10, FF, 75, 0C, 50, FF, 55, 08, 83, C4, 10, 5F, C9, C3, 8B, FF, 55, 8B, EC, 56, 8B, 75, 08, 8D, 45, 10... 
[+]

Entropy:

5.6561

Code size:

540 KB (552,960 bytes)

Remove hao123.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.