How to remove WhatsApp.exe
- File Details
- Overview
- Analysis
WhatsApp.exe
The module WhatsApp.exe has been detected as Virus.Ramnit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
ed15382dc101af3571ca9cf5c15c5303 |
| Size: |
54 MB |
| First Published: |
2017-11-14 23:08:21 (6 years ago) |
| Latest Published: |
2017-11-14 23:08:21 (6 years ago) |
| Status: |
Virus.Ramnit (on last analysis) |
|
| Analysis Date: |
2017-11-14 23:08:21 (6 years ago) |
| %localappdata%\whatsapp\app-0.2.6426 |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x03732000 |
| Name |
Size of data |
MD5 |
| .text |
45700096 |
4bed2b4b66fc7accb6396af3b3a3d900 |
| .rdata |
9083392 |
09de261eba51b533d5178a0a0977d8d6 |
| .data |
468480 |
02a23cf319088b83c9b64f25f1bdeb8f |
| .tls |
512 |
9efa43af7b1faae15ffbd428d0485819 |
| .rodata |
3584 |
44fd3d670ab21dde911bd8b33886e642 |
| .gfids |
3072 |
95c9eeaa121c68ce011e09fe616cb57e |
| _RDATA |
512 |
541ae312af8f5981a726b33a1eae1f6e |
| .rsrc |
470528 |
a63c84c19ebdce4b6adcde99c6bb21ea |
| .reloc |
1766400 |
20ba62cbd13ea81e2db2aa3ed84efa63 |
| .rmnet |
57856 |
84acda044c0bbc7755bdf56d073d3022 |
