How to remove collookupsystem.dll
- File Details
- Overview
- Analysis
collookupsystem.dll
The module collookupsystem.dll has been detected as Worm.Ramnit
File Details
Product Name: |
|
Company Name: |
|
MD5: |
e8810b2d2679b7fae9cb0bd0e7ef2521 |
Size: |
208 KB |
First Published: |
2018-04-15 08:11:35 (6 years ago) |
Latest Published: |
2018-04-15 08:11:35 (6 years ago) |
Status: |
Worm.Ramnit (on last analysis) |
|
Analysis Date: |
2018-04-15 08:11:35 (6 years ago) |
%sysdrive%\งานกู้ 240658\root\program files |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x10000000 |
Entry Address: |
0x0000b000 |
Name |
Size of data |
MD5 |
.text |
20480 |
4c20d70cf24c57d8bd50e492685b3ca1 |
.rdata |
8192 |
fc1a5947b9ecc12db0d601fa94723d21 |
.data |
4096 |
e90f9f1d098f2cfe836177ff272d71ce |
.rsrc |
4096 |
824e42d01ccc9e2c31e09e838aef12f2 |
.reloc |
4096 |
91c06d9a46f24c23f1ccf166cbf6b28e |
.text |
167936 |
d394b51654eeb1c509208e2df8ebe1ce |