How to remove PWRISOVM.EXE
- File Details
- Overview
- Analysis
PWRISOVM.EXE
The module PWRISOVM.EXE has been detected as Worm.Ramnit
File Details
Product Name: |
|
Company Name: |
|
MD5: |
2e88cec9eebcfde6bcb01204d9f95dc3 |
Size: |
1020 KB |
First Published: |
2018-05-10 12:07:55 (6 years ago) |
Latest Published: |
2018-05-10 12:07:55 (6 years ago) |
Status: |
Worm.Ramnit (on last analysis) |
|
Analysis Date: |
2018-05-10 12:07:55 (6 years ago) |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00086000 |
Name |
Size of data |
MD5 |
.text |
143360 |
37a4de6ea950a3d82eb5daa2332e36be |
.rdata |
28672 |
27382be287652df3d2be26e4cdd570cb |
.data |
24576 |
d0e15f2b6698434f581bf84149b8a208 |
.rsrc |
229376 |
c72236e085b7634b3dccb3f3c18ef8b9 |
zgddsma |
73728 |
c1e1bf2c1a76e85b2c8a630f72120eb6 |
.text |
540672 |
b8c7ec25bb21dfa4a57daacd5c07a702 |