How to remove $R1MS27L.exe

$R1MS27L.exe

The module $R1MS27L.exe has been detected as PUP.ChinAd

$R1MS27L.exe
Remove $R1MS27L.exe

File Details

Product Name:

TGBDownloader
Company Name:

Tencent
MD5: ffdae295997fa24ba82bfbbf8a264e08
Size: 3 MB
First Published: 2024-06-17 23:00:46 (2 years ago)
Latest Published: 2026-01-09 23:05:45 (2 days ago)
Status: PUP.ChinAd (on last analysis)
Analysis Date: 2026-01-09 23:05:45 (2 days ago)

Overview

Signed By: Tencent Technology (Shenzhen) Company Limited
Status: Valid

Common Places:

%sysdrive%\$recycle.bin
%sysdrive%\$recycle.bin
%profile%
%profile%
%sysdrive%
%profile%

Geography:

50.0%
16.7%
16.7%
16.7%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x002261ee

PE Sections:

Name Size of data MD5
.text 2630144 8d7c5853056ee544b48e1656eeae8c69
.rdata 548864 0e464b98e51d1482035222a82551bb15
.data 66560 aa7a39c71c59bd4c0b4c40e2b6a41466
.gfids 4608 2f3efc6f39315c9c1a797afbea8e277c
.tls 512 1f354d76203061bfdd5a53dae48d5435
.QMGuid 512 bf619eac0cdf3f68d496ea9344137e8b
.rsrc 386048 94c2f53608f5dd8e967d563134160010
.reloc 121856 c933be81c64431fc30273f3061290918

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $R1MS27L.exe
copyright for information about $R1MS27L.exe