Gridinsoft Logo

Rlls.dll Adware Relevant Analysis

Technical Analysis

File Name rlls.dll
File Type
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.165.174
Database Version 2024-02-17 01:00:16 UTC

Adware.Win32.Relevant.vl!c

Malware family: Relevant

N/A
Detection Rate
740,720
File Size (bytes)
2024-02-17
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
f949546ac2c4c8b6da746f5ac00a9d01
SHA1
106dc92d5e9d362f99a53c212fb58edeff633ab5
SHA256
686681c180705995eab486eb36f1e1365b14f6a2ee1490b81405a333eacc75fa
SHA512
e5c1874838c8716f9a00e11e1484df206b0ab94eeadcfe95b25c79f1af1307fe4d74484c1eedb94b0879b8a3a6eea1b2dc102bf7fa65d2527e3efffb64b1e7f2
ImpHash
a3e0d88a14a03eb488027974568a4f7b

PE Analysis

Basic Information

Image Base 0x10000000
Entry Point 0x1006c690
Compilation Time 2020-10-01 22:51:02
Checksum 0x000ba12b (Actual: 0x000ba12b)
OS Version 5.0
PEiD Signatures PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
PDB Path d:\src\v1.3.338_patch\Client\OSMIMHK\SmallStandalone\OSMIMHK.pdb
Digital Signature OK
Imports 11 libraries
Exports 21 functions
Resources 3 Resources
Sections 6 Sections

Version Information

Comments
CompanyName TMRG, Inc.
FileDescription Relevant-Knowledge
FileVersion 4.0.21.26 (Build 21.26)
InternalName
LegalCopyright Copyright © 2001-2019
LegalTrademarks
OriginalFilename
PrivateBuild
ProductName Relevant-Knowledge
ProductVersion 4.0.21.26 (Build 21.26)
SpecialBuild
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 559,324 bytes 559,616 bytes 6.68 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ B1D8EE1155F4C24EA2AA8C43E1A7293A
.rdata 0x0008a000 114,710 bytes 115,200 bytes 5.13 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0850A5C70E3E37486A55D31A8ECC070D
.data 0x000a7000 31,488 bytes 13,824 bytes 5.15 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 24E8870849452C8930426286E8BC96B9
Shared 0x000af000 1,032 bytes 1,536 bytes 0.03 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F765028DE4AC78EB25D01E00EC33AA81
.rsrc 0x000b0000 1,848 bytes 2,048 bytes 3.92 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3240BBBFFFFF6888BC374A7E46C9593E
.reloc 0x000b1000 40,526 bytes 40,960 bytes 5.46 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 3F26D39F7588F88E3BFA80831305E5BB
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 3 (1,614 bytes)
Resource Type Count Total Size Percentage
RT_STRING 1 104 bytes
6.4%
RT_VERSION 1 1,164 bytes
72.1%
RT_MANIFEST 1 346 bytes
21.4%

Certificate Chain Analysis

No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

OK

Adware.Win32.Relevant.vl!c Removal

Gridinsoft has the capability to identify and eliminate Adware.Win32.Relevant.vl!c without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware