How to remove A0205048.exe
- File Details
- Overview
- Analysis
A0205048.exe
The module A0205048.exe has been detected as PUP.MailRu
File Details
Product Name: |
|
Company Name: |
|
MD5: |
9a42b37e300a904f57e4e4d1e0db9b59 |
Size: |
3 MB |
First Published: |
2018-05-10 19:09:25 (6 years ago) |
Latest Published: |
2025-01-08 23:01:30 (2 weeks ago) |
Status: |
PUP.MailRu (on last analysis) |
|
Analysis Date: |
2025-01-08 23:01:30 (2 weeks ago) |
Overview
%localappdata% |
%localappdata%\mail.ru\mailruupdater\us |
%programfiles%\mail.ru |
%profile%\юда\local settings\application data |
%profile%\icrosoft\local settings\application data\mail.ru\mailruupdater\us |
%sysdrive%\$recycle.bin\s-1-5-21-322503188-916526585-3093623192-1001 |
%localappdata%\kometa |
%profile%\dmin\local settings\application data |
%sysdrive%\adwcleaner\quarantine |
%profile%\oner\local settings\application data |
mailruupdater.exe |
MailRuUpdater.exe |
MailRuUpdater.exe.quarantined |
na_runner.exe |
MAILRU~1.EXE |
A0205047.exe |
A0205048.exe |
|
67.6% |
|
|
4.8% |
|
|
4.7% |
|
|
4.2% |
|
|
2.1% |
|
|
1.5% |
|
|
1.0% |
|
|
0.9% |
|
|
0.9% |
|
|
0.8% |
|
|
0.7% |
|
|
0.7% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
Windows 10 |
49.9% |
|
Windows 7 |
36.4% |
|
Windows 8.1 |
10.0% |
|
Windows XP |
2.1% |
|
Windows 8 |
1.5% |
|
Windows Embedded 8.1 |
0.2% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x0016348c |
Name |
Size of data |
MD5 |
.text |
2661376 |
fc07404f25cd6908b35d1413e9caa827 |
.rdata |
567296 |
360547da2d8b05de189fe4917965150a |
.data |
66048 |
d6962eadb17c9ab3d6fc9d0a0c764cb5 |
.tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
.rsrc |
59392 |
1f5250b4e35fe861881c380db33240d5 |
.reloc |
114688 |
f3ee12da3b972012cc37d14a0892fe87 |