How to remove $RLHMUQ6.exe

$RLHMUQ6.exe

The module $RLHMUQ6.exe has been detected as Ransom.Sabsik

$RLHMUQ6.exe
Remove $RLHMUQ6.exe

File Details

Product Name:

AordVPN

Company Name:

我的公司

MD5: 2039224861adb3e7fd6f93a15d23cb50
Size: 4 MB
First Published: 2021-12-12 21:09:42 (3 years ago)
Latest Published: 2021-12-12 21:09:42 (3 years ago)
Status: Ransom.Sabsik (on last analysis)
Analysis Date: 2021-12-12 21:09:42 (3 years ago)

Common Places:

%sysdrive%\$recycle.bin

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000a6ed0

PE Sections:

Name Size of data MD5
.text 673792 1a78016a5136b8098f54ef92faf02de1
.itext 6144 1ab5e113081ff3bc2c77d98988bb4f99
.data 14336 8b8178989eeee1a9d5355e5356d65fae
.bss 0 d41d8cd98f00b204e9800998ecf8427e
.idata 4096 39e34066552cd253ea6ec8192cf02aef
.didata 512 d0c7bef5217588db089445b43a213d23
.edata 512 f28db148edcfcddd3dfeb061dc470dee
.tls 0 d41d8cd98f00b204e9800998ecf8427e
.rdata 512 185642fa268bab79fb1c35168c4a8b2a
.rsrc 44544 9b72a2d952281d563bd985e84cd1e465

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $RLHMUQ6.exe
copyright for information about $RLHMUQ6.exe