How to remove PhotoDoc.exe
- File Details
- Overview
- Analysis
PhotoDoc.exe
The module PhotoDoc.exe has been detected as Ransom.Wacatac
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
c3fa2fdba3252cb99e05dbe5b88e0d40 |
| Size: |
12 MB |
| First Published: |
2024-05-08 23:01:25 (a year ago) |
| Latest Published: |
2025-02-01 23:01:39 (3 months ago) |
| Status: |
Ransom.Wacatac (on last analysis) |
|
| Analysis Date: |
2025-02-01 23:01:39 (3 months ago) |
| %programfiles% |
| %mydoc%\prog foto\ams passport photo maker v9.35 - ita (10 marzo 2023) by grisu |
| %mydoc%\prog foto\ams passport photo maker v9.35 - ita (10 marzo 2023) by grisu.rar\ams passport photo maker v9.35 - ita (10 marzo 2023) by grisu |
| %sysdrive%\descargas\passport photo maker 9 35 r ar\passport.photo.maker.9.35..rar |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x02e21843 |
| Name |
Size of data |
MD5 |
| .text |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .itext |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .data |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .bss |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .idata |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .didata |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .tls |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .rdata |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .vmp0 |
0 |
d41d8cd98f00b204e9800998ecf8427e |
| .vmp1 |
12590080 |
e2e543194f151e122705f396da1b970b |
| .rsrc |
364032 |
dc7bf8da29f01b25331feb109f230e3b |
