How to remove RmDiskCp.exe
- File Details
- Overview
- Analysis
RmDiskCp.exe
The module RmDiskCp.exe has been detected as Worm.Ramnit
File Details
Product Name: |
|
Company Name: |
|
MD5: |
6386cecb61292c61d91efcd2f186166c |
Size: |
544 KB |
First Published: |
2017-12-18 12:06:04 (6 years ago) |
Latest Published: |
2017-12-18 12:06:04 (6 years ago) |
Status: |
Worm.Ramnit (on last analysis) |
|
Analysis Date: |
2017-12-18 12:06:04 (6 years ago) |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00061000 |
Name |
Size of data |
MD5 |
.text |
8192 |
1dfdfe4f46dbe6e5466351d6daaa3672 |
.rdata |
4096 |
98e475ffd3c4e222315550fda716c193 |
.data |
4096 |
31e13cfb68d8cf3e8011957e2a11728c |
.rsrc |
32768 |
9ab2668b76a68d4631d204abd9fcb465 |
munwryd |
81920 |
c3c221c4c2ff3a6cc87fb3b56d81241d |
.text |
188416 |
5ffafaa5bfcd02a10fd8e281f53e759c |
tvxyojk |
73728 |
9f88d3ad1b6ec2530944f1736b62d268 |
.text |
159744 |
e189491e485b9fac1eb45a6dc8316cce |