How to remove PPAdbServer.exe
- File Details
- Overview
- Analysis
PPAdbServer.exe
The module PPAdbServer.exe has been detected as Worm.Ramnit
File Details
Product Name: |
|
MD5: |
3e19b546a0785af8403d091127a7e8d4 |
Size: |
821 KB |
First Published: |
2017-06-12 04:02:27 (6 years ago) |
Latest Published: |
2017-06-12 04:02:27 (6 years ago) |
Status: |
Worm.Ramnit (on last analysis) |
|
Analysis Date: |
2017-06-12 04:02:27 (6 years ago) |
%temp%\scoped_dir_2632_18276\crx_install\bin\pphelper |
Analysis
Subsystem: |
Windows CUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x000c8000 |
Name |
Size of data |
MD5 |
.text |
477696 |
99ea9c8c27f02161dbfe9c5de764bc66 |
.rdata |
166400 |
2cebce6bb9b01427a62a2a7218393d2b |
.data |
9728 |
540916efda4b556468d3e2298bbb83f2 |
.rsrc |
1024 |
0c669502c29e7669520d5734911d454c |
.reloc |
60416 |
d1f734b545604d77befca80ca2114fc6 |
.text |
124928 |
7eeb6d50775341f863eb40dde27facc1 |