How to remove photosrecovery.exe
- File Details
- Overview
- Analysis
photosrecovery.exe
The module photosrecovery.exe has been detected as Trojan.Heur!
File Details
Product Name: |
|
Company Name: |
|
MD5: |
efbbb62b511b525cba7d375a64acbef0 |
Size: |
676 KB |
First Published: |
2023-03-15 23:18:02 (2 years ago) |
Latest Published: |
2023-03-18 23:16:04 (2 years ago) |
Status: |
Trojan.Heur! (on last analysis) |
|
Analysis Date: |
2023-03-18 23:16:04 (2 years ago) |
%desktop%\kane's files\data transfer\d drive |
%desktop%\kane's files\data transfer\d drive |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00366000 |
Name |
Size of data |
MD5 |
CODE |
473600 |
7a8d78d815f1f13a79922bd493b82725 |
DATA |
5632 |
e506a2d0b149c0ff0bc363bfb11ee9ce |
BSS |
0 |
d41d8cd98f00b204e9800998ecf8427e |
.idata |
10752 |
9b6287817ea63aaea1538ebb2bcb04d2 |
.tls |
0 |
d41d8cd98f00b204e9800998ecf8427e |
.rdata |
512 |
22d9c27f0d49496813a5c6cdbaed6e71 |
.reloc |
512 |
3bc350ef6948d9b628c1ddfdfb338568 |
.rsrc |
199168 |
caf7b56bf7d158b39602671444306a1c |
.WWP32 |
1024 |
bc5ea4cfa75c8e4195da79f3ad83956f |