How to remove $R2XFZQI.crdownload
- File Details
- Overview
- Analysis
$R2XFZQI.crdownload
The module $R2XFZQI.crdownload has been detected as PUP.Plumbytes
File Details
Product Name: |
|
Company Name: |
|
MD5: |
baf4efe35aa11d7d387824ce7925b7a6 |
Size: |
861 KB |
First Published: |
2018-06-01 09:07:03 (7 years ago) |
Latest Published: |
2021-01-07 06:15:22 (4 years ago) |
Status: |
PUP.Plumbytes (on last analysis) |
|
Analysis Date: |
2021-01-07 06:15:22 (4 years ago) |
Overview
%profile% |
%sysdrive% |
%profile%\downloads |
%desktop% |
%temp% |
%sysdrive%\$recycle.bin |
%localappdata%\packages\microsoft.microsoftedge_8wekyb3d8bbwe\tempstate |
%profile%\. walker.centralmedicals\my documents |
%sysdrive%\archivo\laboratoriocalidad |
%desktop%\opera |
antimalwaresetup (1).exe |
antimalwaresetup.exe |
$RU3BFNM.exe |
$RM4W96A.exe |
antimalwaresetup(1).exe |
$RQALZEO.exe |
$RII67T0.exe |
antimalwaresetup (2).exe |
antimalwaresetup_2.exe |
antimalwaresetup.exe.crdownload |
$R2T6NTR.exe |
$R2XFZQI.crdownload |
|
17.9% |
|
|
8.6% |
|
|
6.7% |
|
|
6.4% |
|
|
5.1% |
|
|
4.8% |
|
|
4.2% |
|
|
3.8% |
|
|
3.2% |
|
|
2.6% |
|
|
2.6% |
|
|
2.2% |
|
|
2.2% |
|
|
2.2% |
|
|
1.9% |
|
|
1.6% |
|
|
1.6% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
Windows 10 |
58.4% |
|
Windows 7 |
26.5% |
|
Windows 8.1 |
11.4% |
|
Windows Server 2008 R2 |
2.2% |
|
Windows XP |
0.9% |
|
Windows 8 |
0.6% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x002f03e0 |
Name |
Size of data |
MD5 |
UPX0 |
0 |
00000000000000000000000000000000 |
UPX1 |
812544 |
e12c642e1d936a334cdd7f8755bcf783 |
.rsrc |
64512 |
f87eba7b1b172456ee1a94bc8596fb2e |