How to remove $RI1PREW.dll
- File Details
- Overview
- Analysis
$RI1PREW.dll
The module $RI1PREW.dll has been detected as Adware.Kuaiba
File Details
| Product Name: |
|
| MD5: |
5f0d3c8d13ce35dc7fb0b48611367b94 |
| Size: |
188 KB |
| First Published: |
2017-05-24 17:06:00 (7 years ago) |
| Latest Published: |
2018-03-24 00:03:32 (6 years ago) |
| Status: |
Adware.Kuaiba (on last analysis) |
|
| Analysis Date: |
2018-03-24 00:03:32 (6 years ago) |
Overview
| %programfiles%\kuaizip\x64 |
| %sysdrive%\$recycle.bin\s-1-5-21-1742059381-2257059865-4143528173-1001 |
| %programfiles%\kuaizip |
| MountCore.dll |
| $RI1PREW.dll |
| Windows 7 |
50.0% |
|
| Windows 10 |
25.0% |
|
| Windows 8.1 |
25.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000180000000 |
| Entry Address: |
0x0001471c |
| Name |
Size of data |
MD5 |
| .text |
130560 |
7bcf84e69a8e70e4c6afa0adbbeb1f27 |
| .rdata |
35328 |
5411e69c4d54d046fd34e2b4294b8bce |
| .data |
6656 |
22db049cda4e04e99df70d5dbb0a45d3 |
| .pdata |
8192 |
0722bc8dbe4e5e96bf92dd8a1857ff0f |
| .rsrc |
1536 |
1a029f9e45360985fdfe337ff1d48c76 |
| .reloc |
2048 |
1fb94140f8ff1e4bbc1210055c53379a |
