How to remove Photoshop.exe
- File Details
- Overview
- Analysis
Photoshop.exe
The module Photoshop.exe has been detected as Worm.Ramnit
File Details
Product Name: |
|
Company Name: |
|
MD5: |
243c1bb4d0d9203a04c91dd6a8bf77aa |
Size: |
43 MB |
First Published: |
2017-06-12 04:01:58 (7 years ago) |
Latest Published: |
2017-06-12 04:01:58 (7 years ago) |
Status: |
Worm.Ramnit (on last analysis) |
|
Analysis Date: |
2017-06-12 04:01:58 (7 years ago) |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x02c1d000 |
Name |
Size of data |
MD5 |
.text |
16887808 |
22e5af00b6e116191c2a164d7beb0871 |
.textidx |
716800 |
4a157c2519e79353e65ab160b4a275f6 |
CONST |
4096 |
738b1830ac74a8890f225a26a221b861 |
.rdata |
3002368 |
3296c4c7ac80b1552a44c115a50d66bf |
.data |
425984 |
e3dd52a067717ed4f0091502849cf51f |
.fnp_dir |
4096 |
0e8f51836bec61dde20e93a7f2b44078 |
.fnp_mar |
4096 |
afe904447712c4f997a3e54cd9b3a4a7 |
.rsrc |
23764992 |
a96289c6a935a046a9a2f1585f505d52 |
.text |
155648 |
2ce28f32ba91a50b55e436b2370ebcca |
rvcoeqm |
0 |
00000000000000000000000000000000 |
.text |
155648 |
bf4bf56405d290334980f02a438a9ff3 |
.text |
155648 |
c326e8d08878cf293ea47913f06ba50e |
.text |
126976 |
bd27499d640a9003e0b6d737215475a9 |