How to remove $R1RLR5X.exe
- File Details
- Overview
- Analysis
$R1RLR5X.exe
The module $R1RLR5X.exe has been detected as Ransom.Sabsik
File Details
Product Name: |
|
MD5: |
1073b2e7f778788852d3f7bb79929882 |
Size: |
168 KB |
First Published: |
2023-04-07 23:41:01 (2 years ago) |
Latest Published: |
2023-04-19 23:26:10 (2 years ago) |
Status: |
Ransom.Sabsik (on last analysis) |
|
Analysis Date: |
2023-04-19 23:26:10 (2 years ago) |
%sysdrive%\$recycle.bin |
%windir% |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00021ffe |
Name |
Size of data |
MD5 |
.text |
131584 |
431bf00dc2b4f389fbf44000dd058f44 |
.rsrc |
39936 |
bc2541173786d71b1d58910292de00f4 |
.reloc |
512 |
47d8a8d9103ba7f894e1eb568693866d |