How to remove RTDiagLib.dll
- File Details
- Overview
- Analysis
RTDiagLib.dll
The module RTDiagLib.dll has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
1055dcde1084b6425f82bc4e2ecc884f |
| Size: |
488 KB |
| First Published: |
2018-05-04 14:09:10 (6 years ago) |
| Latest Published: |
2018-05-04 14:09:10 (6 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2018-05-04 14:09:10 (6 years ago) |
| %sysdrive%\jop\driver\utility\smatduallan\winxp\32 |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x00055000 |
| Name |
Size of data |
MD5 |
| .text |
217088 |
abc46206e82334f145543af09545dc38 |
| .rdata |
49152 |
b695600fbbb4697407e7e4723948c965 |
| .data |
8192 |
bcfbf161271218b61bf72872e6e9bcc1 |
| .rsrc |
16384 |
baecc1fbb5f562de0e33a7282855b472 |
| .reloc |
24576 |
3d67e1b5a2712a80101b67b60b4c72bf |
| .text |
180224 |
5126e5a079111c059bc3b9a069ad6d44 |
