How to remove $R1MS27L.exe
- File Details
- Overview
- Analysis
$R1MS27L.exe
The module $R1MS27L.exe has been detected as PUP.ChinAd
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
ffdae295997fa24ba82bfbbf8a264e08 |
| Size: |
3 MB |
| First Published: |
2024-06-17 23:00:46 (a year ago) |
| Latest Published: |
2025-01-20 23:01:20 (5 months ago) |
| Status: |
PUP.ChinAd (on last analysis) |
|
| Analysis Date: |
2025-01-20 23:01:20 (5 months ago) |
Overview
| %sysdrive%\$recycle.bin |
| %sysdrive%\$recycle.bin |
| %profile% |
| %profile% |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x002261ee |
| Name |
Size of data |
MD5 |
| .text |
2630144 |
8d7c5853056ee544b48e1656eeae8c69 |
| .rdata |
548864 |
0e464b98e51d1482035222a82551bb15 |
| .data |
66560 |
aa7a39c71c59bd4c0b4c40e2b6a41466 |
| .gfids |
4608 |
2f3efc6f39315c9c1a797afbea8e277c |
| .tls |
512 |
1f354d76203061bfdd5a53dae48d5435 |
| .QMGuid |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
| .rsrc |
386048 |
94c2f53608f5dd8e967d563134160010 |
| .reloc |
121856 |
c933be81c64431fc30273f3061290918 |
