How to remove MailRuUpdater.exe
- File Details
- Overview
- Analysis
MailRuUpdater.exe
The module MailRuUpdater.exe has been detected as PUP.MailRu
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
948780c09c655b345d113896cb2fd692 |
| Size: |
3 MB |
| First Published: |
2017-05-21 16:05:07 (7 years ago) |
| Latest Published: |
2020-02-24 14:02:36 (4 years ago) |
| Status: |
PUP.MailRu (on last analysis) |
|
| Analysis Date: |
2020-02-24 14:02:36 (4 years ago) |
Overview
| %localappdata%\temp |
| %sysdrive%\adwcleaner\quarantine\files\axkanerebdojocujwuqlgaqgplghbyry |
| %sysdrive%\adwcleaner\quarantine\files\uuurbotsxmlcfqhwoxtwtqgthwelnwng\mailruupdater |
| %sysdrive%\adwcleaner\quarantine\files\xwflxaqabsflfitgaquzrzsxekyuvrfd |
| %sysdrive%\adwcleaner\quarantine\files\clwcauytuahmavfdzcesbepggmcsnjzu |
| %sysdrive%\adwcleaner\quarantine\files\gklhonrgvcoxzksdypqwbhjslevhildg\mailruupdater |
| %sysdrive%\adwcleaner\quarantine\files\vqxisdlihykjcirfwacbtvzemfukzyvg\mailruupdater |
| %programfiles%\mail.ru\mailruupdater |
| %localappdata%\mail.ru |
| %sysdrive%\system volume information\_restore{1dfab839-337f-4707-a61e-ae5cfe2bd769}\rp727 |
| mrutmp.exe |
| MailRuUpdater.exe |
| A0617217.exe |
| A0617214.exe |
| mailruupdater.exe |
| MRUpdater.exe |
| MAILRUUPDATER.EXE |
| A0387716.exe |
| A0155879.exe |
| A0155876.exe |
|
39.0% |
|
|
28.4% |
|
|
11.3% |
|
|
4.3% |
|
|
2.8% |
|
|
2.8% |
|
|
2.1% |
|
|
2.1% |
|
|
2.1% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
0.7% |
|
| Windows 7 |
45.1% |
|
| Windows 8.1 |
19.7% |
|
| Windows 10 |
17.6% |
|
| Windows XP |
13.4% |
|
| Windows 8 |
4.2% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0016541c |
| Name |
Size of data |
MD5 |
| .text |
3223552 |
eb36e16457e5fdefa3d8b3206fd65288 |
| .rdata |
614912 |
1951c89464d90bf846c27b5e5a45a922 |
| .data |
70144 |
7d0817c20de423654a647c47595728d2 |
| .tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
| .rsrc |
59392 |
7fc7300ff4ed572beee4daea8a87c878 |
| .reloc |
138752 |
f26a3404e798688a225fd92bd11e95d8 |
