How to remove registration.exe
- File Details
- Overview
- Analysis
registration.exe
The module registration.exe has been detected as Worm.Ramnit
File Details
Product Name: |
|
Company Name: |
|
MD5: |
4abdbf9f956ef428d3898b175899897d |
Size: |
484 KB |
First Published: |
2017-09-07 17:12:06 (7 years ago) |
Latest Published: |
2017-09-07 17:12:06 (7 years ago) |
Status: |
Worm.Ramnit (on last analysis) |
|
Analysis Date: |
2017-09-07 17:12:06 (7 years ago) |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x0005a000 |
Name |
Size of data |
MD5 |
.text |
208896 |
4925f0bf77405f3ba00c91d5ad008b72 |
.rdata |
49152 |
7d0bc684322c3d419133b081e8df9a79 |
.data |
20480 |
94af7467bd107126d91ac6588cf3991f |
.rsrc |
61440 |
6363cbfd6aa1b2065a60fcdbace7a622 |
ewlrwel |
0 |
00000000000000000000000000000000 |
.text |
151552 |
01f496971644c3e24a6c7024d42ba9da |