How to remove PhotoShare.dll
- File Details
- Overview
- Analysis
PhotoShare.dll
The module PhotoShare.dll has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
1f5d02e924605209bfc02953374feb8b |
| Size: |
832 KB |
| First Published: |
2018-04-15 08:11:38 (6 years ago) |
| Latest Published: |
2018-04-15 08:11:44 (6 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2018-04-15 08:11:44 (6 years ago) |
| %sysdrive%\กู้กู้งาน 240658\root\program files\yahoo! |
| %sysdrive%\งานกู้ 240658\root\program files\yahoo! |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x605e0000 |
| Entry Address: |
0x000a9000 |
| Name |
Size of data |
MD5 |
| .text |
454656 |
55ae896cd75ede9a76e78b65e16ff958 |
| .rdata |
94208 |
9238bd8c3bd6a465d080bb5257e14e1b |
| .data |
49152 |
094f7127cd4e1a9bb039c85297b33b24 |
| .rsrc |
36864 |
1b0f755b80589b57601602e4f1b204c2 |
| .reloc |
45056 |
83a4ae2d063137a03185608e748d73d0 |
| .text |
167936 |
51e623ce4e393d9d9cd3effd0e5358b1 |
