PUA:Win32/Belex malicious file

The PUA:Win32/Belex is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUA:Win32/Belex virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Reads data out of its own binary image

How to determine PUA:Win32/Belex?


File Info:
name: 8E5E638EA88DE6A61424.mlw
path: /opt/CAPEv2/storage/binaries/d8453451f0f331cb159c482c3e1d22f0ba5bbd7b2d1c9c125665d7551fa67e0e
crc32: 5323E3FD
md5: 8e5e638ea88de6a614249d6f81222eee
sha1: 02e4b81ce4c511f8c3d4e35dbe1f89dc82f9801d
sha256: d8453451f0f331cb159c482c3e1d22f0ba5bbd7b2d1c9c125665d7551fa67e0e
sha512: 1e6275f3c58f2f3a7a632d7ad1654cb24c028ea310d2deb3e7f33774cb486da474f5148106d26f9508bdbcff2215f8b9f77f875acc5bd0c20abe8144474a9b37
ssdeep: 49152:gxFecRVn3vJbQVCox/sE76kDV9I/5Yo5feMgg9wdwsaXPS2oTBZvP+zlzRGg002y:SFTn2X0Q6kReRYqfDrp+BZvP+zllJeTc
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CFD533025363D27DF9FA4B30C8F23551AC28F9B14338A4DBA1906E9D98B9AD0D93475F
sha3_384: c50fd16fdfffb2a4a23b33e3417d252fd8c7abe4324950ba6215225d7b576bca5a8496119a3ba9239b2561b130f25a9b
ep_bytes: e9f1550000e90c950000e947b90000e9
timestamp: 2010-03-22 00:59:20

Version Info:
0: [No Data]

PUA:Win32/Belex also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Application.Elex.1
Skyhigh	Artemis!PUP
McAfee	Artemis!3E40F7FF0618
Zillya	Adware.ElexCRTD.Win32.5389
Arcabit	Application.Elex.1
Symantec	Adware.GAIN
ESET-NOD32	a variant of Win32/Adware.ELEX.PIT
BitDefender	Gen:Application.Elex.1
NANO-Antivirus	Riskware.Win32.ELEX.fsltxs
Avast	Win32:Adware-gen [Adw]
Emsisoft	Gen:Application.Elex.1 (B)
DrWeb	Adware.Mutabaha.3637
VIPRE	Gen:Application.Elex.1
Sophos	Generic Reputation PUA (PUA)
Jiangmin	AdWare.ELEX.dlr
Antiy-AVL	GrayWare[AdWare]/Win32.ELEX
Xcitium	Application.Win32.Elex.D@6lhxza
Microsoft	PUA:Win32/Belex
GData	Gen:Application.Elex.1
ALYac	Gen:Application.Elex.1
VBA32	SigAdware.BeijingXingyunNetworkTechnologyCo.Ltd
Malwarebytes	Malware.AI.1965303151
Rising	PUA.Belex!8.F76C (CLOUD)
AVG	Win32:Adware-gen [Adw]
DeepInstinct	MALICIOUS
CrowdStrike	win/grayware_confidence_100% (D)

How to remove PUA:Win32/Belex?

PUA:Win32/Belex removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X