How to remove tbaseregistry32.dll
- File Details
- Overview
- Analysis
tbaseregistry32.dll
The module tbaseregistry32.dll has been detected as Worm.Ramnit
File Details
Product Name: |
|
Company Name: |
|
MD5: |
e49305845c70b41a6e323ee7a9c51216 |
Size: |
199 KB |
First Published: |
2018-09-02 02:16:48 (6 years ago) |
Latest Published: |
2018-09-02 02:16:48 (6 years ago) |
Status: |
Worm.Ramnit (on last analysis) |
|
Analysis Date: |
2018-09-02 02:16:48 (6 years ago) |
%temp%\temp3_amd_chipset_driver_w7_w8.zip\amd_chipset_driver_w7_w8\packages\drivers\amdpsp |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x10000000 |
Entry Address: |
0x0001d000 |
Name |
Size of data |
MD5 |
.text |
66560 |
91ff8a132da7ab8b7a1a778ef7a726d6 |
.rdata |
18944 |
c7f77aae3f0f72af40dc78725daa0e06 |
.data |
4608 |
eca0ae53c322ecc77d600b15f7e62a84 |
.rsrc |
1536 |
0cbd867d7764f7dbf155f4422d1399e9 |
.reloc |
7168 |
1065ef4da4d048697339f42d5b2f18fa |
.text |
104448 |
685c96ecfc4c703b5a7775d40f7c8c3e |