How to remove geplugin.exe
- File Details
- Overview
- Analysis
geplugin.exe
The module geplugin.exe has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
e4ef34968dc7ee0f9f28000472dc5ba1 |
| Size: |
365 KB |
| First Published: |
2017-05-30 08:04:28 (7 years ago) |
| Latest Published: |
2017-06-12 06:06:21 (7 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2017-06-12 06:06:21 (7 years ago) |
| Windows Vista |
50.0% |
|
| Windows 7 |
50.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0003f000 |
| Name |
Size of data |
MD5 |
| .text |
79360 |
3fb12b44070fe04c492c4a302a141f4c |
| .rdata |
50176 |
66c9cf70a954a1076447b1c7a4ff7760 |
| .data |
4096 |
9640c7c6a3972fb67444675accf76797 |
| .rsrc |
51200 |
d623a32991d2fa5e162d045fc3143112 |
| .reloc |
50176 |
3f85642da91546d023c9d9e021259452 |
| rzrzuwt |
0 |
00000000000000000000000000000000 |
| .text |
138240 |
ff9468ea067c605f2389a91b6e007cb9 |
