How to remove qwindows.dll
- File Details
- Overview
- Analysis
qwindows.dll
The module qwindows.dll has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
45ca65494f63f0beef9f92bd052baa4f |
| Size: |
1 MB |
| First Published: |
2018-03-26 14:05:40 (6 years ago) |
| Latest Published: |
2018-03-26 14:05:40 (6 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2018-03-26 14:05:40 (6 years ago) |
| %programfiles%\battle.net\battle.net.9766 |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x00118000 |
| Name |
Size of data |
MD5 |
| .text |
762880 |
85b593fb4d90d64bc32da837d5d2814a |
| .rdata |
306688 |
ba5a84a021bb4665d097c7097903343f |
| .data |
5632 |
a8b81d6149bf432eed3e6c4c1f7de490 |
| .gfids |
512 |
9d0ad8ae3745349ed887ecf7bcb42253 |
| .tls |
512 |
1f354d76203061bfdd5a53dae48d5435 |
| .qtmetad |
512 |
a984af2e580e273f8ae4a625d084c987 |
| .rsrc |
1024 |
3bf951753c3cc9078aed3e930276ca62 |
| .reloc |
43008 |
9ba353b6d7b147aa5e604c1d19b168c6 |
| .text |
110592 |
63ad8aca0d8e66c8726d20efa19c06ca |
