How to remove TPrartition.dll
- File Details
- Overview
- Analysis
TPrartition.dll
The module TPrartition.dll has been detected as Worm.Ramnit
File Details
| MD5: |
ded5b715be7d569686f2166b52aa0e7f |
| Size: |
358 KB |
| First Published: |
2017-05-24 14:04:10 (6 years ago) |
| Latest Published: |
2017-05-24 15:05:40 (6 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2017-05-24 15:05:40 (6 years ago) |
| %desktop%\mtk_vol\mtk_vol_ni |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00040000 |
| Name |
Size of data |
MD5 |
| .text |
154624 |
188597758cb07d040db07a52e98aacbf |
| .data |
47616 |
fe96f642ea6099febc51efd59aa32e6d |
| .tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
| .idata |
3072 |
7d9b4c6df31e2181c85adc87227e2e0a |
| .edata |
512 |
4b6f4c8dca3083ee88842fb2f95314b2 |
| .rsrc |
4608 |
3a04e6051eeb35ad3858d7a6640bc42c |
| .reloc |
14848 |
1843dc984ad0cf782665d936f13aeeb7 |
| .text |
139264 |
f5ff71a13769457e3d4044e362114f06 |
