How to remove SMSvHost[1].exe
- File Details
- Overview
- Analysis
SMSvHost[1].exe
The module SMSvHost[1].exe has been detected as Trojan.CoinMiner
File Details
Product Name: |
|
MD5: |
e3398c31db7ff8ee42af453fa17da9b1 |
Size: |
292 KB |
First Published: |
2018-02-11 00:02:03 (6 years ago) |
Latest Published: |
2019-03-25 08:28:55 (5 years ago) |
Status: |
Trojan.CoinMiner (on last analysis) |
|
Analysis Date: |
2019-03-25 08:28:55 (5 years ago) |
%system% |
%system%\config\systemprofile\appdata\local\microsoft\windows\temporary internet files\content.ie5 |
%system% |
SMSvHost.exe |
SMSvHost[1].exe |
|
37.0% |
|
|
14.8% |
|
|
13.0% |
|
|
9.3% |
|
|
7.4% |
|
|
3.7% |
|
|
3.7% |
|
|
3.7% |
|
|
1.9% |
|
|
1.9% |
|
|
1.9% |
|
|
1.9% |
|
Windows 7 |
72.2% |
|
Windows Server 2008 R2 |
22.2% |
|
Windows Web Server 2008 R2 |
1.9% |
|
Windows 10 |
1.9% |
|
Windows 8.1 |
1.9% |
|
Analysis
Subsystem: |
Windows CUI |
PE Type: |
pe |
OS Bitness: |
64 |
Image Base: |
0x0000000140000000 |
Entry Address: |
0x000189a0 |
Name |
Size of data |
MD5 |
.text |
132096 |
6b9da9b3af829181411e1f4e9bc9e02f |
.rdata |
28160 |
cc275d47891f4edeefe92205296be5cf |
.data |
7680 |
12c0638d9bbd762feed41fb94a045a03 |
.pdata |
6656 |
7936e3d95bbe6c52b78154fcb6315229 |
.rsrc |
123392 |
76400e56c93581a92e0b82c44ce76455 |