How to remove WhatsApp_ExecutionStub.exe
- File Details
- Overview
- Analysis
WhatsApp_ExecutionStub.exe
The module WhatsApp_ExecutionStub.exe has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
ea278c466318a4e4bac8ebd5ab1cb2c6 |
| Size: |
753 KB |
| First Published: |
2017-11-09 21:12:20 (6 years ago) |
| Latest Published: |
2017-11-09 21:12:20 (6 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2017-11-09 21:12:20 (6 years ago) |
| %localappdata%\whatsapp\app-0.2.6426 |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000a6000 |
| Name |
Size of data |
MD5 |
| .text |
113664 |
f72df4be1211608f3b98c8d87ce08eab |
| .rdata |
59904 |
570d7fbc3ddd42ad8006c9dc0f107a75 |
| .data |
5632 |
8836b8ce8e6f6890f7225806780f11f6 |
| .tls |
512 |
1f354d76203061bfdd5a53dae48d5435 |
| .rsrc |
470528 |
efbf53415d75e647e976bc4654a1f562 |
| .reloc |
9216 |
ca3e6a5070b9ad7154e930668b93bee1 |
| .text |
110592 |
3e4e57420b9394327b3cb3af529bd4d1 |
