How to remove geplugin.exe
- File Details
- Overview
- Analysis
geplugin.exe
The module geplugin.exe has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
ef5c7d1ddc205702a82f010cc3285fac |
| Size: |
366 KB |
| First Published: |
2017-05-30 08:04:42 (7 years ago) |
| Latest Published: |
2017-06-12 06:06:31 (7 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2017-06-12 06:06:31 (7 years ago) |
| Windows Vista |
50.0% |
|
| Windows 7 |
50.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0003f000 |
| Name |
Size of data |
MD5 |
| .text |
79360 |
369e91d6c7d76e94f890e8cdd769a91b |
| .rdata |
50176 |
66c9cf70a954a1076447b1c7a4ff7760 |
| .data |
4096 |
9640c7c6a3972fb67444675accf76797 |
| .rsrc |
51200 |
d623a32991d2fa5e162d045fc3143112 |
| .reloc |
50176 |
7b70a97e4534b9c814f7de9b139bb220 |
| pxmokid |
0 |
00000000000000000000000000000000 |
| .text |
138240 |
ff9468ea067c605f2389a91b6e007cb9 |
