How to remove CoolType.dll
- File Details
- Overview
- Analysis
CoolType.dll
The module CoolType.dll has been detected as Worm.Ramnit
File Details
Product Name: |
|
Company Name: |
|
MD5: |
d4027aaad05dda494454b5612a5df9c0 |
Size: |
2 MB |
First Published: |
2018-04-20 21:03:54 (6 years ago) |
Latest Published: |
2018-04-20 21:03:54 (6 years ago) |
Status: |
Worm.Ramnit (on last analysis) |
|
Analysis Date: |
2018-04-20 21:03:54 (6 years ago) |
%sysdrive%\$recycle.bin\s-1-5-21-3441542776-2206585850-244734146-1000\$rdrmjh1\adobe\reader 9.0 |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x08000000 |
Entry Address: |
0x0025f000 |
Name |
Size of data |
MD5 |
.text |
1630208 |
cb90b83529cd7716490c56aa4cd2ac99 |
.rdata |
573440 |
b07b16255f6385677db43fa5c751c4b9 |
.data |
94208 |
8d9a29a6f716ee8e3c15d5328adb68f3 |
.rsrc |
4096 |
f2633792112e5d35591bee16b82098d2 |
.reloc |
126976 |
7f01eb08e00bafa5b174141032027561 |
.text |
65536 |
2ebcd266cd2eb1e2a4bae98cac193459 |