How to remove formatfactory.exe
- File Details
- Overview
- Analysis
formatfactory.exe
The module formatfactory.exe has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
6127add34c4b2de489c202402d9dc73c |
| Size: |
3 MB |
| First Published: |
2018-03-22 06:09:35 (6 years ago) |
| Latest Published: |
2018-03-22 06:09:42 (6 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2018-03-22 06:09:42 (6 years ago) |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0030c000 |
| Name |
Size of data |
MD5 |
| .text |
479232 |
8f40ca78ce8d1106c102d37ff2cb517d |
| .rdata |
227840 |
f7f639d0cb1d81678d4aef306b91d266 |
| .data |
122368 |
756bde7699fc98b5c1aea33cdf234ff0 |
| .rsrc |
2189312 |
0e42099f2f29231f6522e62b6f252614 |
| .reloc |
75776 |
3ede946066fcdd4b7f17d9eaa8980fd6 |
| .text |
92672 |
14b8a1193c9e1c067cd67c64865fc67d |
