How to remove tbaseregistry32.dll
- File Details
- Overview
- Analysis
tbaseregistry32.dll
The module tbaseregistry32.dll has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
a93563588d96707b2cb4d4c8633b5877 |
| Size: |
205 KB |
| First Published: |
2018-11-08 13:15:43 (6 years ago) |
| Latest Published: |
2018-11-08 13:15:43 (6 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2018-11-08 13:15:43 (6 years ago) |
| %sysdrive%\amd\amd-catalyst-15.7.1-with-dotnet45-win7-64bit\packages\drivers\amdpsp |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x0001d000 |
| Name |
Size of data |
MD5 |
| .text |
66560 |
91ff8a132da7ab8b7a1a778ef7a726d6 |
| .rdata |
18944 |
6f12101fd719c7eb2a4f14852876592f |
| .data |
4608 |
eca0ae53c322ecc77d600b15f7e62a84 |
| .rsrc |
1536 |
7b4b28e79f17614ca4dbe07548a594d6 |
| .reloc |
7168 |
1065ef4da4d048697339f42d5b2f18fa |
| .text |
110592 |
dbf3aedf2bd739eda68a21b1ea58a66a |
