How to remove tp_Erase.dll
- File Details
- Overview
- Analysis
tp_Erase.dll
The module tp_Erase.dll has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| MD5: |
f18a89fdd48ddfe5965f1f546901905c |
| Size: |
246 KB |
| First Published: |
2018-04-15 08:11:44 (6 years ago) |
| Latest Published: |
2018-04-15 08:11:44 (6 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2018-04-15 08:11:44 (6 years ago) |
| %sysdrive%\งานกู้ 240658\root\program files\wondershare\video editor |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x00018000 |
| Name |
Size of data |
MD5 |
| .text |
58368 |
0ade879b5d9619affe10c1c3e7b3ae4f |
| .rdata |
12288 |
36df059bdeb76069179981773027585f |
| .data |
8704 |
60a9c3a48171e9b7a6df4f75facaf34e |
| .rsrc |
1536 |
02e2fc922d2b9d21dfbee0b4c62500cb |
| .reloc |
4096 |
8d50861322030b14819fc0c656ea51bf |
| .text |
166400 |
ced1eb3789c41b82553656d58d4f3413 |
