How to remove cp1215PQ.dll
- File Details
- Overview
- Analysis
cp1215PQ.dll
The module cp1215PQ.dll has been detected as Worm.Ramnit
File Details
Product Name: |
|
Company Name: |
|
MD5: |
6f7f81a3c7da3e0e992a342d6768cfdc |
Size: |
9 MB |
First Published: |
2017-11-28 16:14:27 (7 years ago) |
Latest Published: |
2017-11-28 16:14:27 (7 years ago) |
Status: |
Worm.Ramnit (on last analysis) |
|
Analysis Date: |
2017-11-28 16:14:27 (7 years ago) |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x10000000 |
Entry Address: |
0x00979000 |
Name |
Size of data |
MD5 |
.text |
196608 |
e9f88587d850d23c89ea0729f1ae2772 |
.rdata |
9637888 |
c34b5ff5aba1a51a2ddd7c8e174588df |
.data |
32768 |
6a6713d97ae9c8fa4e4367f6b7a63bab |
.rsrc |
4096 |
a4c96b41a902b6369170839e57e41fa4 |
.reloc |
40960 |
82231abbdc7a8ff5f9e8ac4b4139f9e9 |
.text |
69632 |
796c78099538cacb1383dea32bb6087e |