How to remove sandboxbroker.dll
- File Details
- Overview
- Analysis
sandboxbroker.dll
The module sandboxbroker.dll has been detected as Worm.Ramnit
File Details
Product Name: |
|
Company Name: |
|
MD5: |
03c2f5a38e3a60a1cd4e4a9a5cd4dfc8 |
Size: |
313 KB |
First Published: |
2017-11-09 21:12:30 (7 years ago) |
Latest Published: |
2017-11-09 21:12:30 (7 years ago) |
Status: |
Worm.Ramnit (on last analysis) |
|
Analysis Date: |
2017-11-09 21:12:30 (7 years ago) |
%programfiles%\trgool web tv\firefox |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x10000000 |
Entry Address: |
0x00038000 |
Name |
Size of data |
MD5 |
.text |
109056 |
7b0bc684c84688f9cbcd84d3b65d5e36 |
.rdata |
92672 |
7726176502dca8dcae3da89d5301879f |
.data |
512 |
b0ec01172a61f9feb85bc81a44646a95 |
.rsrc |
1024 |
4e3ee47887550ddc09ca1cb329fbd6c1 |
.reloc |
6144 |
71c62d76599b16a330310bf4a79548a7 |
.text |
110592 |
1bb2708a3f457dc2fe91ba797f65e7b3 |