File Name | rlls.dll |
File Type |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
Scanner Version | 1.0.165.174 |
Database Version | 2024-02-17 01:00:16 UTC |
Malware family: Relevant
Hash Type | Value | Action |
---|---|---|
MD5 |
f949546ac2c4c8b6da746f5ac00a9d01
|
|
SHA1 |
106dc92d5e9d362f99a53c212fb58edeff633ab5
|
|
SHA256 |
686681c180705995eab486eb36f1e1365b14f6a2ee1490b81405a333eacc75fa
|
|
SHA512 |
e5c1874838c8716f9a00e11e1484df206b0ab94eeadcfe95b25c79f1af1307fe4d74484c1eedb94b0879b8a3a6eea1b2dc102bf7fa65d2527e3efffb64b1e7f2
|
|
ImpHash |
a3e0d88a14a03eb488027974568a4f7b
|
Image Base | 0x10000000 |
Entry Point | 0x1006c690 |
Compilation Time | 2020-10-01 22:51:02 |
Checksum | 0x000ba12b (Actual: 0x000ba12b) |
OS Version | 5.0 |
PEiD Signatures |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
PDB Path | d:\src\v1.3.338_patch\Client\OSMIMHK\SmallStandalone\OSMIMHK.pdb |
Digital Signature | OK |
Imports | 11 libraries |
Exports | 21 functions |
Resources | 3 Resources |
Sections | 6 Sections |
Comments | |
CompanyName | TMRG, Inc. |
FileDescription | Relevant-Knowledge |
FileVersion | 4.0.21.26 (Build 21.26) |
InternalName | |
LegalCopyright | Copyright © 2001-2019 |
LegalTrademarks | |
OriginalFilename | |
PrivateBuild | |
ProductName | Relevant-Knowledge |
ProductVersion | 4.0.21.26 (Build 21.26) |
SpecialBuild | |
Translation | 0x0409 0x04b0 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
559,324 bytes | 559,616 bytes | 6.68 (Compressed) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
B1D8EE1155F4C24EA2AA8C43E1A7293A |
.rdata |
0x0008a000 |
114,710 bytes | 115,200 bytes | 5.13 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
0850A5C70E3E37486A55D31A8ECC070D |
.data |
0x000a7000 |
31,488 bytes | 13,824 bytes | 5.15 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
24E8870849452C8930426286E8BC96B9 |
Shared |
0x000af000 |
1,032 bytes | 1,536 bytes | 0.03 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
F765028DE4AC78EB25D01E00EC33AA81 |
.rsrc |
0x000b0000 |
1,848 bytes | 2,048 bytes | 3.92 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
3240BBBFFFFF6888BC374A7E46C9593E |
.reloc |
0x000b1000 |
40,526 bytes | 40,960 bytes | 5.46 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
3F26D39F7588F88E3BFA80831305E5BB |
1 section(s) with elevated entropy (≥6.5) - possible compression
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_STRING | 1 | 104 bytes | |
RT_VERSION | 1 | 1,164 bytes | |
RT_MANIFEST | 1 | 346 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
OK
Gridinsoft has the capability to identify and eliminate Adware.Win32.Relevant.vl!c without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system