How to remove mracdrv.sys
- File Details
- Overview
- Analysis
mracdrv.sys
The module mracdrv.sys has been detected as PUP.MailRu
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
cca59596331d2b9055746280230110d7 |
| Size: |
10 MB |
| First Published: |
2018-10-20 19:22:50 (6 years ago) |
| Latest Published: |
2024-03-08 23:14:12 (a year ago) |
| Status: |
PUP.MailRu (on last analysis) |
|
| Analysis Date: |
2024-03-08 23:14:12 (a year ago) |
Overview
| %system% |
| %sysdrive%\mnt\disk\sda3\windows\system32 |
| %system% |
| %system% |
| %system% |
| %system% |
| %system% |
| %system% |
| %system% |
| %system% |
| Russia |
67.4% |
|
| Ukraine |
10.3% |
|
| Kazakhstan |
6.1% |
|
| Belarus |
3.3% |
|
| Poland |
1.7% |
|
| Germany |
1.3% |
|
| Canada |
0.8% |
|
| Bulgaria |
0.8% |
|
| Spain |
0.6% |
|
| Netherlands |
0.6% |
|
| Armenia |
0.6% |
|
| Thailand |
0.6% |
|
| United States |
0.6% |
|
| Kyrgyzstan |
0.4% |
|
| Lithuania |
0.4% |
|
| Colombia |
0.4% |
|
| South Korea |
0.4% |
|
| Ecuador |
0.4% |
|
| Hong Kong |
0.4% |
|
| Argentina |
0.4% |
|
| Morocco |
0.2% |
|
| Moldova |
0.2% |
|
| Czech Republic |
0.2% |
|
| Bahrain |
0.2% |
|
| Taiwan |
0.2% |
|
| Finland |
0.2% |
|
| Austria |
0.2% |
|
| Dominican Republic |
0.2% |
|
| Sri Lanka |
0.2% |
|
| France |
0.2% |
|
| Serbia |
0.2% |
|
| Windows 10 |
61.2% |
|
| Windows 7 |
32.2% |
|
| Windows 8.1 |
6.0% |
|
| Windows 8 |
0.4% |
|
| Windows XP |
0.2% |
|
Analysis
| Subsystem: |
Native |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x00907652 |
| Name |
Size of data |
MD5 |
| .text |
0 |
00000000000000000000000000000000 |
| PFCDENP |
0 |
00000000000000000000000000000000 |
| PCDENP |
0 |
00000000000000000000000000000000 |
| .rdata |
0 |
00000000000000000000000000000000 |
| .data |
0 |
00000000000000000000000000000000 |
| .pdata |
0 |
00000000000000000000000000000000 |
| .gfids |
0 |
00000000000000000000000000000000 |
| INIT |
0 |
00000000000000000000000000000000 |
| .vmp0 |
0 |
00000000000000000000000000000000 |
| .vmp1 |
512 |
387d3cec6641bcedbf49389f4d198e83 |
| .vmp2 |
10598912 |
1b4198faaf2940e1fb00dbadb12c5696 |
| .reloc |
512 |
19d1c693ec692885287dd987b0466fc4 |
| .rsrc |
1024 |
efb77e3f7aad7a3eabb3986026f7c102 |
