How to remove geplugin.exe
- File Details
- Overview
- Analysis
geplugin.exe
The module geplugin.exe has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
989d5cf48bd3eed8783a1bab4b129bb9 |
| Size: |
365 KB |
| First Published: |
2017-05-30 08:04:48 (7 years ago) |
| Latest Published: |
2017-06-12 06:06:38 (7 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2017-06-12 06:06:38 (7 years ago) |
| Windows Vista |
50.0% |
|
| Windows 7 |
50.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0003f000 |
| Name |
Size of data |
MD5 |
| .text |
79360 |
82fc0efc65036da6a45964cff1655465 |
| .rdata |
50176 |
66c9cf70a954a1076447b1c7a4ff7760 |
| .data |
4096 |
9640c7c6a3972fb67444675accf76797 |
| .rsrc |
51200 |
d623a32991d2fa5e162d045fc3143112 |
| .reloc |
50176 |
2e6055524161e23aa24f1dbd9790f8f5 |
| xrjjbci |
0 |
00000000000000000000000000000000 |
| .text |
138240 |
11c35d367cb64c92e2df5b6a6dc9346d |
