How to remove A0019456.dll
- File Details
- Overview
- Analysis
A0019456.dll
The module A0019456.dll has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
22c3f7c2b2fe8b86b57f77a318e8b6b4 |
| Size: |
359 KB |
| First Published: |
2018-04-15 08:11:32 (6 years ago) |
| Latest Published: |
2018-04-15 08:11:32 (6 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2018-04-15 08:11:32 (6 years ago) |
| %sysdrive%\system volume information\_restore{ee9e659f-b0dc-4227-95c9-1c7ccb8918df} |
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0003b000 |
| Name |
Size of data |
MD5 |
| .text |
138240 |
6ff8b0a49e4a2bdfeb1c8f19e6c18538 |
| .data |
23040 |
2ffe5449163c5b9d64a1163fb82012ff |
| .tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
| .idata |
2560 |
9c788558bfc70848197bd33e7fb09383 |
| .edata |
512 |
0d890640403c493a6936010dffb1d76e |
| .rsrc |
5632 |
37485d32ca0133b318a9e0a3a33aeaa9 |
| .DAT0 |
6144 |
989f01bf17701d039de544d9a998088d |
| .DAT1 |
17408 |
4436f23078a4352ea0ed5d475002260a |
| .reloc |
6144 |
cc0e888e37885ab6ea086d360a16c4ea |
| .text |
166400 |
71b48437f0b0d5bef17b404ea73888a9 |
