How to remove $R1RLR5X.exe
- File Details
- Overview
- Analysis
$R1RLR5X.exe
The module $R1RLR5X.exe has been detected as Ransom.Sabsik
File Details
| Product Name: |
|
| MD5: |
1073b2e7f778788852d3f7bb79929882 |
| Size: |
168 KB |
| First Published: |
2023-04-07 23:41:01 (2 years ago) |
| Latest Published: |
2023-04-19 23:26:10 (2 years ago) |
| Status: |
Ransom.Sabsik (on last analysis) |
|
| Analysis Date: |
2023-04-19 23:26:10 (2 years ago) |
| %sysdrive%\$recycle.bin |
| %windir% |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00021ffe |
| Name |
Size of data |
MD5 |
| .text |
131584 |
431bf00dc2b4f389fbf44000dd058f44 |
| .rsrc |
39936 |
bc2541173786d71b1d58910292de00f4 |
| .reloc |
512 |
47d8a8d9103ba7f894e1eb568693866d |