How to remove PPAdbServer.exe
- File Details
- Overview
- Analysis
PPAdbServer.exe
The module PPAdbServer.exe has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| MD5: |
e0b326abf24141089c1e53ca635c6321 |
| Size: |
875 KB |
| First Published: |
2017-07-24 02:08:54 (7 years ago) |
| Latest Published: |
2017-07-26 04:15:19 (7 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2017-07-26 04:15:19 (7 years ago) |
| %localappdata%\ucbrowser\user data\default\extensions\pbnmnlipmkfkadfcdocgblonoccmolpe\3.1.0_0\bin\pphelper |
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000c9000 |
| Name |
Size of data |
MD5 |
| .text |
477696 |
3bdf2c326e72834eb5751cd2983df788 |
| .rdata |
166400 |
2cebce6bb9b01427a62a2a7218393d2b |
| .data |
9728 |
540916efda4b556468d3e2298bbb83f2 |
| .rsrc |
1024 |
0c669502c29e7669520d5734911d454c |
| .reloc |
60416 |
787fc2f292ecef0d57aacd0ca4709231 |
| pjvcedc |
0 |
00000000000000000000000000000000 |
| .text |
179200 |
56a4d05eef3c64a5637c130de40cd102 |
