How to remove rsssourcesaferes.dll
- File Details
- Overview
- Analysis
rsssourcesaferes.dll
The module rsssourcesaferes.dll has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
40b2c9ea49a8f8c75a1237b8f3ee5942 |
| Size: |
176 KB |
| First Published: |
2017-09-07 17:11:32 (7 years ago) |
| Latest Published: |
2017-09-07 17:11:47 (7 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2017-09-07 17:11:47 (7 years ago) |
| %sysdrive%\progra~1\micros~4\common\tools\vs-ent98\vmodeler |
| %programfiles%\microsoft visual studio\common\tools\vs-ent98\vmodeler |
| rsssou~2.dll |
| rsssourcesaferes.dll |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x00008000 |
| Name |
Size of data |
MD5 |
| .text |
4096 |
f17ac06b96393c648d2640db737d8824 |
| .rdata |
4096 |
53535aca2e6a1dac3b1ad8da2058889c |
| .data |
4096 |
24ff557a6e405205f28849e02e5f24c8 |
| .rsrc |
8192 |
c5e57e468397167c6ba68df8ea73a627 |
| .reloc |
4096 |
f861687bdc567306a99af4e35db56956 |
| .text |
151552 |
ba1ef116cb86789b8de98fbe6bb7a13d |
