» hao123.1.0.0.1111.exe
Overview
Analysis
File Details
Programs (1)

hao123.1.0.0.1111.exe

hao123 Desktop Shortcut

Beijing baidu Netcom science and technology co.ltd

This file is installed with the program Hao123-Client.

File name:

Publisher:

Baidu.com (signed by Beijing baidu Netcom science and technology co.ltd)

Product:

hao123 Desktop Shortcut

Version:

1.0.0.1111

MD5:

52b728bc8731b0efa9df710f5e6e9b1f

SHA-1:

5c98fc1b335d589e75cbb862dd68f00518406c6f

SHA-256:

3f850f20b6969d98902439a72e929050a636f3574764d6e43270daee3008b3e1

Scanner detections:

5 / 68

Status:

Clean (5 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

5/10/2024 7:42:03 PM UTC (today)

Scan engine

Detection

Engine version

avast!

Win32:Evo-gen [Susp]

2014.9-160212

Bkav FE

W32.HfsAdware

1.3.0.6379

ESET NOD32

Win32/Hao123.C potentially unwanted (variant)

10.11732

Qihoo 360 Security

HEUR/QVM10.1.Malware.Gen

1.0.0.1015

Trend Micro House Call

Suspicious_GEN.F47V0514

7.2.43

File size:

873.8 KB (894,792 bytes)

Product version:

1.0.0.1111

Original file name:

hao123.exe

File type:

Executable application (Win32 EXE)

Language:

Chinese

Common path:

C:\users\{user}\appdata\roaming\baidu\hao123-brsocial\hao123.1.0.0.1111.exe

Digital Signature

Signed by:

Beijing baidu Netcom science and technology co.ltd

Authority:

VeriSign, Inc.

Valid from:

2/26/2012 9:00:00 PM

Valid to:

2/26/2015 8:59:59 PM

Subject:

CN=Beijing baidu Netcom science and technology co.ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Beijing baidu Netcom science and technology co.ltd, L=Beijing, S=Beijing, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

56659719569BE07B775A1B2275E2D83A

File PE Metadata

Compilation timestamp:

2/14/2014 3:30:10 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

6144:7c4azPsUgIHZdjz2za6MoBDmXzyiCHSM5msmjaLWJKsC3trGJ8fS2:I4Ert5dea6h6yiCnIsmja6JKs+

Entry address:

0x4506B

Entry point:

E8, AE, 9B, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 56, FF, 35, 98, BF, 46, 00, 8B, 35, 74, A2, 45, 00, FF, D6, 85, C0, 74, 21, A1, 94, BF, 46, 00, 83, F8, FF, 74, 17, 50, FF, 35, 98, BF, 46, 00, FF, D6, FF, D0, 85, C0, 74, 08, 8B, 80, F8, 01, 00, 00, EB, 27, BE, 38, 1D, 46, 00, 56, FF, 15, 30, A2, 45, 00, 85, C0, 75, 0B, 56, E8, 22, 07, 00, 00, 59, 85, C0, 74, 18, 68, 28, 1D, 46, 00, 50, FF, 15, 70, A2, 45, 00, 85, C0, 74, 08, FF, 75, 08, FF, D0, 89, 45, 08, 8B, 45, 08, 5E, 5D, C3, 6A, 00, E8, 87... 
[+]

Code size:

355.5 KB (364,032 bytes)

The file hao123.1.0.0.1111.exe has been discovered within the following program.

Hao123-Client by Baidu, Inc.

The software is typically bundled with third party installers such as Open Candy and others. Offer your users the Baidu Hao123 web directory as their homepage for fast access to useful websites.

en.hao123.com

21% remove it

Scan hao123.1.0.0.1111.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.