How to remove Mediahit.Update.Process.exe
- File Details
- Overview
- Analysis
Mediahit.Update.Process.exe
The module Mediahit.Update.Process.exe has been detected as Trojan.LoadMoney
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
b3ad0d7002a289df334e44dea42f721d |
| Size: |
445 KB |
| First Published: |
2017-08-10 18:05:50 (7 years ago) |
| Latest Published: |
2018-08-19 08:07:11 (6 years ago) |
| Status: |
Trojan.LoadMoney (on last analysis) |
|
| Analysis Date: |
2018-08-19 08:07:11 (6 years ago) |
Overview
| %appdata%\mediahit\shadow\mediahit.update |
| %appdata%\mediahit\shadow |
| Windows 8 |
50.0% |
|
| Windows 7 |
50.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0006f96e |
| MVID: |
b86181d3-b414-45e2-9f00-c1ab38e36981 |
| Typelib ID: |
63d3beff-fb97-43aa-accd-bef5e0c2a162 |
| Name |
Size of data |
MD5 |
| .text |
449024 |
83f951ebdd3eb969996a4485dfb8cf27 |
| .rsrc |
2048 |
cd8b4549054f099bb7f792078d965ff5 |
| .reloc |
512 |
c436759850d5f29e61c14e53c2e25f33 |
