How to remove wmspdmod.dll
- File Details
- Overview
- Analysis
wmspdmod.dll
The module wmspdmod.dll has been detected as Worm.Ramnit
File Details
Product Name: |
|
Company Name: |
|
MD5: |
be7784ac3e6c61c2b23ec28b64291831 |
Size: |
636 KB |
First Published: |
2018-04-15 08:11:49 (6 years ago) |
Latest Published: |
2018-04-15 08:11:49 (6 years ago) |
Status: |
Worm.Ramnit (on last analysis) |
|
Analysis Date: |
2018-04-15 08:11:49 (6 years ago) |
%sysdrive%\งานกู้ 240658\root\windows\registeredpackages\{a47b3654-48ee-48a5-b629-97d70175e58f}$backup$ |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x4ef60000 |
Entry Address: |
0x0007e000 |
Name |
Size of data |
MD5 |
.text |
424448 |
eec255eafe9487c354cb1478a9049f42 |
.data |
36864 |
2785648f29ddd957660caac497b84296 |
.data1 |
7680 |
71628c6a87f848d31982ddc7f695cf32 |
.rsrc |
1024 |
7b230d189ba1bacede2fc1e08974b685 |
.reloc |
14336 |
af611c6df2926b16d09c6e04cfe218e8 |
.text |
166400 |
8ad199c7753f7b7b8b991e9ce0cf6221 |