How to remove querybuilder.dll
- File Details
- Overview
- Analysis
querybuilder.dll
The module querybuilder.dll has been detected as Worm.Ramnit
File Details
Product Name: |
|
Company Name: |
|
MD5: |
5ec61e3ed173eee742a7d32f44ce02f6 |
Size: |
352 KB |
First Published: |
2017-05-30 08:04:16 (7 years ago) |
Latest Published: |
2017-06-12 06:05:54 (7 years ago) |
Status: |
Worm.Ramnit (on last analysis) |
|
Analysis Date: |
2017-06-12 06:05:54 (7 years ago) |
Windows Vista |
50.0% |
|
Windows 7 |
50.0% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x24b10000 |
Entry Address: |
0x00036000 |
Name |
Size of data |
MD5 |
.text |
143360 |
590b919325ec8539e1b9c81adc0fc44c |
.rdata |
32768 |
9f35ed6874e6f938be6868252ec2d6f8 |
.data |
4096 |
4c2d44fe8b10e9160e0f54e553476fb4 |
.rsrc |
12288 |
e55be22a7bca2cc11a3f7f704ef96b91 |
.reloc |
24576 |
6f6b6a05fbf971ef2fb9c90523a923a7 |
.text |
139264 |
8f72806731708f8deaa24d0c8345e94a |