How to remove $R50XJX5.exe
- File Details
- Overview
- Analysis
$R50XJX5.exe
The module $R50XJX5.exe has been detected as PUP.MailRu
File Details
Product Name: |
|
Company Name: |
|
MD5: |
0a7604036ebd1ebe604f14978d236030 |
Size: |
4 MB |
First Published: |
2017-05-21 13:07:34 (7 years ago) |
Latest Published: |
2019-08-28 10:42:13 (5 years ago) |
Status: |
PUP.MailRu (on last analysis) |
|
Analysis Date: |
2019-08-28 10:42:13 (5 years ago) |
Overview
%localappdata%\temp |
%sysdrive%\$recycle.bin\s-1-5-21-3118798610-2729874070-2900721389-1000 |
%sysdrive%\docume~1\user\locals~1\applic~1\mail.ru |
%profile%\ser\local settings\application data\mail.ru |
%sysdrive%\adwcleaner\filequarantine\c\program files (x86)\mail.ru\mailruupdater |
%localappdata%\mail.ru |
%sysdrive%\$recycle.bin\s-1-5-21-1731075834-680073870-1864487519-1000 |
%sysdrive%\docume~1\b935~1\locals~1\temp |
%profile%\ористувач\local settings\application data\mail.ru |
%programfiles%\mail.ru\mailruupdater |
MailRuUpdater.exe |
$R50XJX5.exe |
MAILRU~1.EXE |
A0308005.exe |
MailRuUpdater.exe.vir |
mailruupdater.exe |
$RI282AR.exe |
MailRuUpdater(16).exe |
A0029520.exe |
A0029346.exe |
A0265695.exe |
A0265677.exe |
mrutmp.exe |
|
45.8% |
|
|
38.6% |
|
|
4.8% |
|
|
3.6% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
Windows 10 |
39.8% |
|
Windows 7 |
39.8% |
|
Windows 8.1 |
12.0% |
|
Windows XP |
8.4% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00299bea |
Name |
Size of data |
MD5 |
.text |
3993088 |
6e4ef991d549be0a01b1c7f5bedc0a84 |
.rdata |
827392 |
472f8423e657af0b5635f6d8ab532776 |
.data |
92160 |
0ab4805d40d0cb2c247ed4db9a7509f2 |
.tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
.rsrc |
59392 |
5555e62603be49b69e5435acbf0cac98 |
.reloc |
188416 |
9a1d10d5b7c08dcf960b4c17ba37378c |