» hao123.exe
Overview
Analysis
File Details

hao123.exe

hao123 Desktop Shortcut

Beijing baidu Netcom science and technology co.ltd

The file hao123.exe by Beijing baidu Netcom science and technology co.ltd has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.

File name:

hao123.exe

Publisher:

Baidu.com (signed by Beijing baidu Netcom science and technology co.ltd)

Product:

hao123 Desktop Shortcut

Version:

1.0.0.111

MD5:

e5ee24b9be55b6937ae3d3d90cc5f878

SHA-1:

20b0e03276e207d322c0b949098a92823ad9f2a9

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

4/19/2024 10:17:25 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Hao123.ShrtCt (M)

17.3.16.0

File size:

1.5 MB (1,545,544 bytes)

Product version:

1.0.0.111

Original file name:

hao123.exe

Language:

Chinês (República Popular da China)

Common path:

C:\Documents and Settings\{user}\Local settings\temp\bdg190.tmp

Digital Signature

Signed by:

Beijing baidu Netcom science and technology co.ltd

Authority:

VeriSign, Inc.

Valid from:

2/26/2012 9:00:00 PM

Valid to:

2/26/2015 8:59:59 PM

Subject:

CN=Beijing baidu Netcom science and technology co.ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Beijing baidu Netcom science and technology co.ltd, L=Beijing, S=Beijing, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

56659719569BE07B775A1B2275E2D83A

File PE Metadata

Compilation timestamp:

8/18/2014 12:42:28 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

Entry address:

0x6A88B

Entry point:

E8, DB, C4, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 20, 57, 56, E8, BC, AF, FF, FF, 33, FF, 59, 3B, F7, 75, 1D, E8, 4A, 1F, 00, 00, 57, 57, 57, 57, 57, C7, 00, 16, 00, 00, 00, E8, 35, B2, FF, FF, 83, C4, 14, 83, C8, FF, EB, 34, 39, 7D, 0C, 74, DE, B9, FF, FF, FF, 7F, C7, 45, EC, 49, 00, 00, 00, 89, 75, E8, 89, 75, E0, 89, 4D, E4, 3B, C1, 77, 03, 89, 45, E4, FF, 75, 14, 8D, 45, E0, FF, 75, 10, FF, 75, 0C, 50, FF, 55, 08, 83, C4, 10, 5F, C9, C3, 8B, FF, 55, 8B, EC, 56, 8B, 75, 08, 8D, 45, 10... 
[+]

Code size:

543.5 KB (556,544 bytes)

Remove hao123.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.