How to remove DShowPlugin.dll
- File Details
- Overview
- Analysis
DShowPlugin.dll
The module DShowPlugin.dll has been detected as Worm.Ramnit
File Details
Product Name: |
|
MD5: |
1a19f1911e162512ff3e5371890911ff |
Size: |
870 KB |
First Published: |
2017-09-08 04:11:43 (6 years ago) |
Latest Published: |
2017-09-08 04:11:43 (6 years ago) |
Status: |
Worm.Ramnit (on last analysis) |
|
Analysis Date: |
2017-09-08 04:11:43 (6 years ago) |
%commonappdata%\bluestacks\bluestacksgamemanager\obs\plugins |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x10000000 |
Entry Address: |
0x000bf000 |
Name |
Size of data |
MD5 |
.text |
566784 |
adabf753e5b25811abdd375d8c7e7125 |
.rdata |
137216 |
255eb2d47e74c0212dcbce46c0df2850 |
.data |
8192 |
71633694c4ba74194ce53efc3be3686e |
.idata |
12288 |
5b4d7b26771b7a65d978967a08283849 |
.rsrc |
8192 |
66559aa74904c1afbe03bd4203978854 |
.reloc |
26112 |
3662a4b379167dd41dcb6fc3c415db5c |
.text |
131584 |
a4ded8afa99a4b0d0b110f4960286d3b |