How to remove PreProd.dll
- File Details
- Overview
- Analysis
PreProd.dll
The module PreProd.dll has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
dbe5768ec9689fbf55f89c3c5c8485d9 |
| Size: |
1 MB |
| First Published: |
2018-11-28 19:11:48 (6 years ago) |
| Latest Published: |
2018-11-28 19:11:48 (6 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2018-11-28 19:11:48 (6 years ago) |
| %temp%\ir_ext_temp_0\autoplay\docs\install\noncompressed\sa\english |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x00187000 |
| Name |
Size of data |
MD5 |
| .text |
983040 |
7ef91485a71f297c5aa02bb91e7473f4 |
| .rdata |
204800 |
bd021bab4b174b3b8577650c85f51abf |
| .data |
40960 |
fb8fa30abd2db8dbf310b4cdfb52674b |
| .rsrc |
262144 |
ba4f3fb1673900356c947e561f76bc85 |
| .reloc |
90112 |
330291d26eb5e782b3be6254756224a3 |
| .text |
180224 |
ccd610216a8a26ab67509d4e27cf76e8 |
