How to remove PresentationFontCache.exe
- File Details
- Overview
- Analysis
PresentationFontCache.exe
The module PresentationFontCache.exe has been detected as Trojan.CoinMiner
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
5f9805cc6c6be2960e6e564fb3fea22e |
| Size: |
59 KB |
| First Published: |
2018-08-10 17:08:15 (6 years ago) |
| Latest Published: |
2020-12-03 14:57:22 (4 years ago) |
| Status: |
Trojan.CoinMiner (on last analysis) |
|
| Analysis Date: |
2020-12-03 14:57:22 (4 years ago) |
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
|
60.5% |
|
|
10.5% |
|
|
5.3% |
|
|
5.3% |
|
|
5.3% |
|
|
2.6% |
|
|
2.6% |
|
|
2.6% |
|
|
2.6% |
|
|
2.6% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00001873 |
| Name |
Size of data |
MD5 |
| .text |
3072 |
a9e3c489cf6313c6db49f77eb10fbba7 |
| .rdata |
1536 |
adc803db213b32e9ecd367864a8b88aa |
| .data |
512 |
55743481aebf44ec95e86d5d2a35f255 |
| .rsrc |
49664 |
57ea04611ec6829b07ab61ed24f956b1 |
