How to remove 4B91.tmp
4B91.tmp
The module 4B91.tmp has been detected as PUP.MailRu
File Details
| Product Name: | Amigo Installer |
| Company Name: | Mail.Ru |
| MD5: | 9da6869395a610d88e99076c56c93ef4 |
| Size: | 1 MB |
| First Published: | 2017-05-26 18:09:22 (6 years ago) |
| Latest Published: | 2020-10-15 14:48:36 (3 years ago) |
| Status: | PUP.MailRu (on last analysis) | |
| Analysis Date: | 2020-10-15 14:48:36 (3 years ago) |
Overview
| Signed By: | Mail.Ru LLC |
| Status: | Valid |
Common Places:
| %temp%\cr_f0df9.tmp |
| %temp%\cr_93f8e.tmp |
| %temp%\cr_e0bba.tmp |
| %localappdata%\amigo\application\54.0.2840.191\installer |
| %temp%\cr_1808b.tmp |
| %temp%\cr_0440d.tmp |
| %temp%\cr_50347.tmp |
| %localappdata%\temp |
| %temp%\cr_db03f.tmp |
| %temp%\cr_5c916.tmp |
File Names:
| setup.exe |
| 4B91.tmp |
Geography:
| 38.0% | ||
| 34.4% | ||
| 4.9% | ||
| 4.3% | ||
| 3.1% | ||
| 3.1% | ||
| 2.5% | ||
| 1.2% | ||
| 1.2% | ||
| 0.6% | ||
| 0.6% | ||
| 0.6% | ||
| 0.6% | ||
| 0.6% | ||
| 0.6% | ||
| 0.6% | ||
| 0.6% | ||
| 0.6% | ||
| 0.6% | ||
| 0.6% | ||
| 0.6% |
OS Version:
| Windows 7 | 56.7% | |
| Windows 10 | 31.1% | |
| Windows 8.1 | 9.1% | |
| Windows 8 | 3.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x000b2a3a |
PE Sections:
| Name | Size of data | MD5 |
| .text | 939008 | dbdf40f8f3500786b210db13fcbc1921 |
| .rdata | 154624 | 77e35556d0b4e2d6f806c41104a7470c |
| .data | 4608 | d071807885417ce7ffcb6c52d79a11e7 |
| CPADinfo | 512 | d273139d7dd4280f40c57791927d34c6 |
| .gfids | 1024 | 41e37747d0f56c8f3967144b5116fc00 |
| .tls | 512 | bf619eac0cdf3f68d496ea9344137e8b |
| .rsrc | 194560 | 4a221d73289f5bfff71a7b7472f365a3 |
| .reloc | 30208 | e28d17485e1efecaae9dbea4bad4cd32 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for 4B91.tmp
