How to remove RHRecCmdTool.dll
- File Details
- Overview
- Analysis
RHRecCmdTool.dll
The module RHRecCmdTool.dll has been detected as Worm.Ramnit
File Details
| MD5: |
d3f323990358b823440c4658c271167b |
| Size: |
477 KB |
| First Published: |
2017-05-24 14:04:10 (7 years ago) |
| Latest Published: |
2017-05-24 15:05:38 (7 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2017-05-24 15:05:38 (7 years ago) |
| %desktop%\merpai\merapi tool_1.4.7_20160313\factorytool |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0005e000 |
| Name |
Size of data |
MD5 |
| .text |
263168 |
608b93cf5603d9858c04360c968cc0e7 |
| .data |
56832 |
c8e4c866f9bcf79a61028424b4a9ce76 |
| .tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
| .idata |
3584 |
3ec8189b039a8d7b2facd8e08abad9cc |
| .edata |
1024 |
a96c3d9989a1cfe2cf26b4407ff6b77b |
| .rsrc |
6656 |
2317213cb1087827436f96abecd911be |
| .reloc |
15872 |
5fa2a732c03b32fd346febe224265386 |
| .text |
139264 |
92042442aa0f4d01b0156e27228b8fd6 |
