How to remove tp_whisk.dll
- File Details
- Overview
- Analysis
tp_whisk.dll
The module tp_whisk.dll has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| MD5: |
f97d45a47155fe08bad91800e3e19ad7 |
| Size: |
278 KB |
| First Published: |
2018-04-15 08:11:39 (6 years ago) |
| Latest Published: |
2018-04-15 08:11:39 (6 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2018-04-15 08:11:39 (6 years ago) |
| %sysdrive%\งานกู้ 240658\root\program files\wondershare\video editor |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x6a100000 |
| Entry Address: |
0x00021000 |
| Name |
Size of data |
MD5 |
| .text |
71680 |
788b673216f01e5967fc14d468a103a4 |
| .rdata |
22528 |
6cac4be32ead2c0804771574a2e8a4dd |
| .data |
17408 |
056fcee0b9e03d25b5a295a1f59a02ba |
| .rsrc |
1536 |
5c15084cf373dfd7c3ccb66647de7626 |
| .reloc |
4608 |
1dc9aba7bd0b28b7d07e2523d0ac016a |
| .text |
166400 |
21deb12af103577177fc6d48570e2cfd |
