How to remove rthdcpl.exe
- File Details
- Overview
- Analysis
rthdcpl.exe
The module rthdcpl.exe has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
065a2fa4e3d69145f548184a530049f1 |
| Size: |
15 MB |
| First Published: |
2017-11-28 16:14:30 (7 years ago) |
| Latest Published: |
2017-11-28 16:14:30 (7 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2017-11-28 16:14:30 (7 years ago) |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x01037000 |
| Name |
Size of data |
MD5 |
| .text |
2217472 |
3218bfdea727bb4a870ba3ac42abc077 |
| .data |
223744 |
4fe2b7e77b760b21a13c9392aa264a18 |
| .tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
| .rdata |
512 |
de3ee1fcbdb177f7726e2324a8ba2e26 |
| .idata |
14336 |
208121676698f87de119ff0ca8305ec9 |
| .edata |
357888 |
da31a7f5c5c828231d7319de93c538a4 |
| .rsrc |
13156352 |
96aadd9668182521cff13634f044f453 |
| .reloc |
153600 |
ff357250f1ae2f2520eb472e44c274ea |
| .text |
69632 |
ec993f815512cf79cd07de1bdf1bd893 |
