How to remove PhBookSP.dll
- File Details
- Overview
- Analysis
PhBookSP.dll
The module PhBookSP.dll has been detected as Worm.Ramnit
File Details
Product Name: |
|
Company Name: |
|
MD5: |
220e2b78b2f33d19a30a78844276376b |
Size: |
116 KB |
First Published: |
2018-08-19 02:11:38 (6 years ago) |
Latest Published: |
2018-08-19 05:03:20 (6 years ago) |
Status: |
Worm.Ramnit (on last analysis) |
|
Analysis Date: |
2018-08-19 05:03:20 (6 years ago) |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x10000000 |
Entry Address: |
0x0000d000 |
Name |
Size of data |
MD5 |
.text |
12288 |
a95cd4a0d01400a4df4e2d61fcf5e51a |
.rdata |
4096 |
12f2bba5e4d7d99e852425d30eb34544 |
.data |
4096 |
504b29ff70f935ccbe5c3cf350b3e503 |
.rsrc |
24576 |
95abc8edf44971a2faeb6ef9fae60038 |
.reloc |
4096 |
40a14e323f8937d79f0eb9ca0419acd6 |
.text |
65536 |
76644e2f16a6495be124d76e7e441233 |