How to remove photopad.exe
- File Details
- Overview
- Analysis
photopad.exe
The module photopad.exe has been detected as Possible Threat
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
6d6dce01f9611c3ca5c27937d0ddc3ce |
| Size: |
7 MB |
| First Published: |
2018-08-28 09:14:41 (5 years ago) |
| Latest Published: |
2018-08-28 09:14:41 (5 years ago) |
| Status: |
Possible Threat (on last analysis) |
|
| Analysis Date: |
2018-08-28 09:14:41 (5 years ago) |
Overview
| Signed By: |
NCH Software |
| Status: |
Invalid (digital signature could be stolen or file could be patched) |
| %profile%\downloads\nch.photopad--rsload.net-- |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0017ad53 |
| Name |
Size of data |
MD5 |
| .text |
1664000 |
c97a178aeb18336ebdd67339ca2d56b8 |
| .rdata |
407040 |
84a3c203e67236a0b84e919da4c718f9 |
| .data |
23040 |
e510c194ef3bd0acc2c97da18aa3679b |
| .rsrc |
5631488 |
f91ff0ece2308872dca029acf99d14fb |
| .reloc |
130560 |
2b5cd81f693df3dde68681f6fb4a72e1 |
